Format: 1.8
Date: Wed, 15 Nov 2023 13:12:32 -0500
Source: openvpn
Binary: openvpn
Built-For-Profiles: noudeb
Architecture: amd64 amd64_translations
Version: 2.6.5-0ubuntu1.1
Distribution: mantic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy02-amd64-118.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.5-0ubuntu1.1) mantic-security; urgency=medium
 .
   * SECURITY UPDATE: divide-by-zero via --fragment option
     - debian/patches/CVE-2023-46849.patch: remove saving initial frame code
       in src/openvpn/forward.c, src/openvpn/init.c, src/openvpn/openvpn.h.
     - CVE-2023-46849
   * SECURITY UPDATE: memory disclosure or code exec via use-after-free
     - debian/patches/CVE-2023-46850.patch: fix using to_link buffer after
       freed in src/openvpn/ssl.c.
     - CVE-2023-46850
Checksums-Sha1:
 f1a5e69504c031139b6adc67e525d4753aada75a 1407284 openvpn-dbgsym_2.6.5-0ubuntu1.1_amd64.ddeb
 e73a1725b8edb0ff6055fe71802316897f9c55d0 7605 openvpn_2.6.5-0ubuntu1.1_amd64.buildinfo
 e273ca0cf05f1628c68e123a104355e4f091747f 673510 openvpn_2.6.5-0ubuntu1.1_amd64.deb
 785f6a3d09aed970981e9ee6c26b2a192cf69678 27851 openvpn_2.6.5-0ubuntu1.1_amd64_translations.tar.gz
Checksums-Sha256:
 80b8c2ceafe774160b68a6fbc8ad66402d3b69eab94b4d405be172469278063e 1407284 openvpn-dbgsym_2.6.5-0ubuntu1.1_amd64.ddeb
 92b5156ce5ff4b1dd874faa4f05ab9be24c964369486fe0dc9f5fa9bcbe28d06 7605 openvpn_2.6.5-0ubuntu1.1_amd64.buildinfo
 b90954a7f577f0a09b8283ce8b3092536fe122586365816bca35a6103d1d1015 673510 openvpn_2.6.5-0ubuntu1.1_amd64.deb
 7a11c1073894335b3e73dfe941b81e5da953eba85582399204cc7e3788724c34 27851 openvpn_2.6.5-0ubuntu1.1_amd64_translations.tar.gz
Files:
 612d451e81396d167c6de1704f0e1a25 1407284 debug optional openvpn-dbgsym_2.6.5-0ubuntu1.1_amd64.ddeb
 c0f92a12480d54d1a7b496c4a28110bd 7605 net optional openvpn_2.6.5-0ubuntu1.1_amd64.buildinfo
 caf069a4b22e82a1eb27a3a5f6c33b7d 673510 net optional openvpn_2.6.5-0ubuntu1.1_amd64.deb
 adb547c75f634e4c69bcf69e024927cd 27851 raw-translations - openvpn_2.6.5-0ubuntu1.1_amd64_translations.tar.gz
Original-Maintainer: Bernhard Schmidt <berni@debian.org>