openvpn.git - Debian repo for openvpn

Age	Commit message (Collapse)	Author
2017-06-29	Import Debian changes 2.3.4-5+deb8u2debian/2.3.4-5+deb8u2	Alberto Gonzalez Iniesta
	openvpn (2.3.4-5+deb8u2) jessie-security; urgency=high * SECURITY UPDATE: authenticated remote DoS vulnerability due to packet ID rollover. CVE-2017-7479. Kudos to Steve Beattie <sbeattie@ubuntu.com> for doing all the backporting work for this patch. - debian/patches/CVE-2017-7479-prereq.patch: merge packet_id_alloc_outgoing() into packet_id_write() - debian/patches/CVE-2017-7479.patch: do not assert when packet ID rollover occurs * SECURITY UPDATE: (Closes: #865480) - CVE-2017-7508.patch. Fix remotely-triggerable ASSERT() on malformed IPv6 packet. - CVE-2017-7520.patch. Prevent two kinds of stack buffer OOB reads and a crash for invalid input data. - CVE-2017-7521.patch. Fix potential double-free in --x509-alt-username. - CVE-2017-7521bis.patch. Fix remote-triggerable memory leaks.
2014-12-01	Patch expired certs in order to get a build-able package	Alberto Gonzalez Iniesta

2014-12-01	Apply upstream patch to fix CVE-2014-8104	Alberto Gonzalez Iniesta

2014-10-13	Fix temp file leak. Closes: #764651debian/2.3.4-3	Alberto Gonzalez Iniesta

2014-09-02	Refresh patches for 2.3.4	Alberto Gonzalez Iniesta

2014-05-14	Add patch to fix #747265, refresh patches	Alberto Gonzalez Iniesta

2013-06-03	Upstream 2.3.2	Alberto Gonzalez Iniesta

2013-05-17	new upstream	Alberto Gonzalez Iniesta

2013-05-17	Fix CVE-2013-2061	Alberto Gonzalez Iniesta

2013-01-10	Moving to 2.3	Alberto Gonzalez Iniesta

2012-03-16	Add dpkg-buildflags to plugins build flagsdebian/2.2.1-7	Alberto Gonzalez Iniesta

2012-02-23	Add "Description" to latest patches. Fix manpage	Alberto Gonzalez Iniesta

2012-02-23	Fix spelling and hyphen warnings in manpage	Alberto Gonzalez Iniesta

2012-02-23	Fix spelling error in occ.c	Alberto Gonzalez Iniesta

2012-02-21	Imported Debian patch 2.2.1-1debian/2.2.1-1	Alberto Gonzalez Iniesta