UbuntuUpdates.org

Package "openvpn"

Name: openvpn

Description:

virtual private network daemon

Latest version: 2.4.9-3ubuntu1.1
Release: groovy (20.10)
Level: updates
Repository: main
Homepage: https://openvpn.net/

Links


Download "openvpn"


Other versions of "openvpn" in Groovy

Repository Area Version
base main 2.4.9-3ubuntu1
security main 2.4.9-3ubuntu1.1

Changelog

Version: 2.4.9-3ubuntu1.1 2021-05-04 13:06:25 UTC

  openvpn (2.4.9-3ubuntu1.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Authentication bypass with deferred authentication
    - debian/patches/CVE-2020-15078.patch: ensure key state is
      authenticated before sending push reply in src/openvpn/push.c.
    - CVE-2020-15078

 -- Marc Deslauriers <email address hidden> Tue, 27 Apr 2021 10:49:50 -0400

CVE-2020-15078 OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with defe



About   -   Send Feedback to @ubuntu_updates