From 3637e1aa7ac62f0bba5e9a196e42f22cb93a498b Mon Sep 17 00:00:00 2001 From: Alberto Gonzalez Iniesta Date: Thu, 22 Jun 2017 18:00:56 +0200 Subject: Import Debian changes 2.4.0-6+deb9u1 openvpn (2.4.0-6+deb9u1) stretch-security; urgency=high * SECURITY UPDATE: (Closes: #865480) - CVE-2017-7508.patch. Fix remotely-triggerable ASSERT() on malformed IPv6 packet. - CVE-2017-7520.patch. Prevent two kinds of stack buffer OOB reads and a crash for invalid input data. - CVE-2017-7521.patch. Fix potential double-free in --x509-alt-username. - CVE-2017-7521bis.patch. Fix remote-triggerable memory leaks. --- debian/changelog | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'debian/changelog') diff --git a/debian/changelog b/debian/changelog index 3de80ab..0f96932 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,15 @@ +openvpn (2.4.0-6+deb9u1) stretch-security; urgency=high + + * SECURITY UPDATE: (Closes: #865480) + - CVE-2017-7508.patch. Fix remotely-triggerable ASSERT() on malformed IPv6 + packet. + - CVE-2017-7520.patch. Prevent two kinds of stack buffer OOB reads and a + crash for invalid input data. + - CVE-2017-7521.patch. Fix potential double-free in --x509-alt-username. + - CVE-2017-7521bis.patch. Fix remote-triggerable memory leaks. + + -- Alberto Gonzalez Iniesta Thu, 22 Jun 2017 18:00:56 +0200 + openvpn (2.4.0-6) unstable; urgency=medium * Apply upstream patch to fix shrinking MTU sizes on reconnects causing not -- cgit v1.2.3 From 678cfd249add7ca758e4c41933c7b730132c99f4 Mon Sep 17 00:00:00 2001 From: Bernhard Schmidt Date: Thu, 3 Aug 2017 11:12:30 +0200 Subject: Changelog for 2.4.0-6+deb9u2 --- debian/changelog | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'debian/changelog') diff --git a/debian/changelog b/debian/changelog index 0f96932..dd7f177 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +openvpn (2.4.0-6+deb9u2) stretch; urgency=medium + + * Fix broken reconnect on connection loss due to wrong push digest calculation. + Thanks to Patrick Matthäi for testing (Closes: #863110) + + -- Bernhard Schmidt Tue, 18 Jul 2017 22:15:17 +0200 + openvpn (2.4.0-6+deb9u1) stretch-security; urgency=high * SECURITY UPDATE: (Closes: #865480) -- cgit v1.2.3