Format: 1.8
Date: Wed, 15 Nov 2023 13:12:32 -0500
Source: openvpn
Binary: openvpn
Built-For-Profiles: noudeb
Architecture: armhf armhf_translations
Version: 2.6.5-0ubuntu1.1
Distribution: mantic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos03-arm64-017.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.5-0ubuntu1.1) mantic-security; urgency=medium
 .
   * SECURITY UPDATE: divide-by-zero via --fragment option
     - debian/patches/CVE-2023-46849.patch: remove saving initial frame code
       in src/openvpn/forward.c, src/openvpn/init.c, src/openvpn/openvpn.h.
     - CVE-2023-46849
   * SECURITY UPDATE: memory disclosure or code exec via use-after-free
     - debian/patches/CVE-2023-46850.patch: fix using to_link buffer after
       freed in src/openvpn/ssl.c.
     - CVE-2023-46850
Checksums-Sha1:
 6391bc289c47457458d5246d2760c2d9d6bf460f 1244334 openvpn-dbgsym_2.6.5-0ubuntu1.1_armhf.ddeb
 cfaa2d094313352c639634ba7a6854c4b1bf5139 7416 openvpn_2.6.5-0ubuntu1.1_armhf.buildinfo
 1f42f07347a54aa60df1b39aafceeac9c0f28ac0 635332 openvpn_2.6.5-0ubuntu1.1_armhf.deb
 4d4a32c4cf77da269727f7dbef9565fbbe4660b3 27247 openvpn_2.6.5-0ubuntu1.1_armhf_translations.tar.gz
Checksums-Sha256:
 b940625c134a2ec5f46b68bf4f2066618dcd7cdf8d5c2611ec8755b6787aa8ff 1244334 openvpn-dbgsym_2.6.5-0ubuntu1.1_armhf.ddeb
 b42bd2732cfe8d16228db2d3c5117c6c7e9c1a8da53aaa863daa013c84f6db75 7416 openvpn_2.6.5-0ubuntu1.1_armhf.buildinfo
 b6e9d5925ff32d825088fe092f73dbb58dab7ad5416c0d189a054f379f41279b 635332 openvpn_2.6.5-0ubuntu1.1_armhf.deb
 322388b133e55b681181516931995524226e22e82a037424cb05c58bda4dbe96 27247 openvpn_2.6.5-0ubuntu1.1_armhf_translations.tar.gz
Files:
 bb9f4702d023dddf66c3a92927e49c2d 1244334 debug optional openvpn-dbgsym_2.6.5-0ubuntu1.1_armhf.ddeb
 5e71eadebb5345bac6078b57ebcd2e32 7416 net optional openvpn_2.6.5-0ubuntu1.1_armhf.buildinfo
 d51c1704221fe5787d39823b045c8d4b 635332 net optional openvpn_2.6.5-0ubuntu1.1_armhf.deb
 8b963cb07e769d663916beac9f98d221 27247 raw-translations - openvpn_2.6.5-0ubuntu1.1_armhf_translations.tar.gz
Original-Maintainer: Bernhard Schmidt <berni@debian.org>