-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 12 May 2017 15:39:52 +0200
Source: openvpn
Binary: openvpn
Architecture: source amd64
Version: 2.2.1-8+deb7u4
Distribution: wheezy-security
Urgency: medium
Maintainer: Alberto Gonzalez Iniesta <agi@inittab.org>
Changed-By: Raphaël Hertzog <hertzog@debian.org>
Description:
openvpn - virtual private network daemon
Changes:
openvpn (2.2.1-8+deb7u4) wheezy-security; urgency=medium
.
* Non-maintainer upload by the Debian LTS team.
* Applied two upstream patches fixing an authenticated remote DoS
vulnerability where the peer can trigger an ASSERT() by sending/
downloading large amount of data. That vulnerability is tracked
as CVE-2017-7479.
Checksums-Sha1:
0f8b409a1c29d251e57b5e3ddd19f80578a0fa55 1495 openvpn_2.2.1-8+deb7u4.dsc
626ad7aa5cfee1c69bddd478fcc839b2ba620bf3 146548 openvpn_2.2.1-8+deb7u4.debian.tar.gz
84244babaa46fff440688c5d902ca8ac638d676b 512570 openvpn_2.2.1-8+deb7u4_amd64.deb
Checksums-Sha256:
fa1ea74c88e5bf9d06da730bf8adf9ec9bbbc059d7e316729cbffc7caaf130fc 1495 openvpn_2.2.1-8+deb7u4.dsc
0a9846312e7d3250f0935f6032952bcbe1855404a3c932f9172e9e4ac309745c 146548 openvpn_2.2.1-8+deb7u4.debian.tar.gz
ca999609af2ab7e375cb693e9acb828f3742939b6cab2bcff3087ad2cfb9d1d6 512570 openvpn_2.2.1-8+deb7u4_amd64.deb
Files:
0a30a4d9d63a6bad4616c0cac9daa51e 1495 net optional openvpn_2.2.1-8+deb7u4.dsc
c908abd53f070a0ee8bb90456fd7161a 146548 net optional openvpn_2.2.1-8+deb7u4.debian.tar.gz
ef2f5122699c844507821a5f24eb3882 512570 net optional openvpn_2.2.1-8+deb7u4_amd64.deb
-----BEGIN PGP SIGNATURE-----
Comment: Signed by Raphael Hertzog
iQEzBAEBCgAdFiEE1823g1EQnhJ1LsbSA4gdq+vCmrkFAlka+AIACgkQA4gdq+vC
mrl7RAgAuremslAsCbWOOj1qZeVVecpaFyXQihVxG0fPRHzi8IW5o5JZaY7WOpEB
OUSk3Uh3tovL4jAROdgdfwqqN4qXbYf/59V067UnzWMiQMuUGz9M781xHrrklXxx
h1zjbymNv6gj+KmjpZuCLsK/AkPcX0TtjtnFSWVIEio/Q/aEjHyEk302K0JdcJMC
lt/MS7ZVlbqWpJ+f99GX6p+aS9Q7v0BUu1bIqxUhHkr1eS1NO9/6INYyOdCumJWn
KJu74tyb3FULS1j30WTjsTjUBXnb6PmNSnDplD1HxLeV0y6ESNMgBz0plEDocU4G
+e9J8UMXDGuvsA5PTiASSVNEWAGjyQ==
=K4RL
-----END PGP SIGNATURE-----
