Ubuntu
openvpn package

openvpn 2.6.9-1ubuntu4.1 source package in Ubuntu

Changelog

openvpn (2.6.9-1ubuntu4.1) noble-security; urgency=medium

  * SECURITY UPDATE: client can circumvent management client-kill
    - debian/patches/CVE-2024-28882.patch: only schedule_exit() once in
      src/openvpn/forward.*, src/openvpn/push.c.
    - CVE-2024-28882
  * SECURITY UPDATE: malicious peer can DoS or send garbage to logs
    - debian/patches/CVE-2024-5594.patch: properly handle null bytes and
      invalid characters in control messages in src/openvpn/buffer.*,
      src/openvpn/forward.c, tests/unit_tests/openvpn/test_buffer.c.
    - CVE-2024-5594

 -- Marc Deslauriers <email address hidden>  Thu, 27 Jun 2024 14:21:42 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Noble
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
net
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Noble updates main net
Noble security main net

Downloads

File Size SHA-256 Checksum
openvpn_2.6.9.orig.tar.gz 1.8 MiB e08d147e15b4508dfcd1d6618a1f21f1495f9817a8dadc1eddf0532fa116d7e3
openvpn_2.6.9-1ubuntu4.1.debian.tar.xz 67.8 KiB aa40aa486bffb21dd5d0316a32457e0e5f204e504c05763a873775967dd2e93b
openvpn_2.6.9-1ubuntu4.1.dsc 2.2 KiB 8696cd675e4c0ddf74736cf8a3b915f4be6bec9c261e2c274ee55ce1975637a6

View changes file

Binary packages built by this source

openvpn: virtual private network daemon

 OpenVPN is an application to securely tunnel IP networks over a
 single UDP or TCP port. It can be used to access remote sites, make
 secure point-to-point connections, enhance wireless security, etc.
 .
 OpenVPN uses all of the encryption, authentication, and certification
 features provided by the OpenSSL library (any cipher, key size, or
 HMAC digest).
 .
 OpenVPN may use static, pre-shared keys or TLS-based dynamic key exchange. It
 also supports VPNs with dynamic endpoints (DHCP or dial-up clients), tunnels
 over NAT or connection-oriented stateful firewalls (such as Linux's iptables).

openvpn-dbgsym: debug symbols for openvpn