-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 22 Jun 2017 18:53:39 +0200 Source: openvpn Binary: openvpn Architecture: source amd64 Version: 2.2.1-8+deb7u5 Distribution: wheezy-security Urgency: low Maintainer: Alberto Gonzalez Iniesta <agi@inittab.org> Changed-By: Alberto Gonzalez Iniesta <agi@inittab.org> Description: openvpn - virtual private network daemon Changes: openvpn (2.2.1-8+deb7u5) wheezy-security; urgency=low . * patches/CVE-2017-7520.patch: Prevent two kinds of stack buffer OOB reads and a crash for invalid input data. (CVE-2017-7520) Checksums-Sha1: 6d5c7ef4041ef3812969a8ad8174aa263a4c29f4 1805 openvpn_2.2.1-8+deb7u5.dsc d5a8e9c635aa330eae8e66e1ccbe2b98e4c3047b 911472 openvpn_2.2.1.orig.tar.gz 50db0b1f82467972f85680aa07d4dcb76ddf110d 148288 openvpn_2.2.1-8+deb7u5.debian.tar.gz f770ee30f22ad9684af6ebe6100f5222470d5536 519130 openvpn_2.2.1-8+deb7u5_amd64.deb Checksums-Sha256: 858eaa2a96764128855e0efa51078002f9f11cf859c836b1f0c48cad2749f8f2 1805 openvpn_2.2.1-8+deb7u5.dsc a860858cc92d4573399bb2ff17ac62d9b4b8939e6af0b8cc69150ba39d6e94e0 911472 openvpn_2.2.1.orig.tar.gz 3ea4751259948840db432d55bc7158a2639c6b4e398190d10feee9387cd78b72 148288 openvpn_2.2.1-8+deb7u5.debian.tar.gz 5a628acb2b080c7fb1593058c18fe59199714c3c2f5e2b9c894e89b6bdb04c9a 519130 openvpn_2.2.1-8+deb7u5_amd64.deb Files: 48d548765ba1fa6c065575b13e337abd 1805 net optional openvpn_2.2.1-8+deb7u5.dsc 500bee5449b29906150569aaf2eb2730 911472 net optional openvpn_2.2.1.orig.tar.gz f56f1d2538915a66b4d30e3ee9ac8e24 148288 net optional openvpn_2.2.1-8+deb7u5.debian.tar.gz 49f8d7105c7379a55af75fd0315ee17d 519130 net optional openvpn_2.2.1-8+deb7u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAllMLlkACgkQHpU+J9Qx HlijpRAAnAl8aUO4P2IditTrfUEDFXvwkoJ1y0MhP+Ls5Szj55dMPATVgPViafZ4 humySgXJeP2tXoQh52ZCoZnwt6VsjX5zVx/C1hfDDv/3agfr4qSl8g8/Tku0j+6S Cfr77tccDyQbQqdB8EVB3/Y7BLJycG5I4Zehpz6yUJs6p/sCBZ9uzvzRrA2YjuSA rk8J/5v/Fifo9AonFakjkWjZpkKKQU86tloEOWXCERfiEzRPDXJgwbwvvDFFMqeB vZnHM5nsaOX9PYPOPjoeZZN60Jzbz5r8AX7UF23cUnTNYUWRJVeSjjCsQp14x49l V8iZOs8k/m7tqqnwwd4b9PyP/GocLZrV8dsEk885ye0nFCn3STHDrWYmLJaRwnVD pYxUh8XwPUNQ+bL5pHjqgDH26AgqvwHvoj4iYDZ5YUKUCm6Zf4UnKgij3z5e5U5c 4YsBpus3wCt7kxYN3i9EJSHC23duSMoarWMHVi9+xylby0bI6STBq3WanZ0Obbht uKrMo11lYBAT5FZNERgqE0PPcZqx7BnExb7/2dh4eqqcEbyIHkUhOuWMDvMFh+zz FDjqRxnMBw0pGCM3l/3jhrmHiZwIPIFTs3OBkAkE4fCnUtLwER47jFgL7IdhhvLo mem2lheD318zeOxJlIyDMn5W47Vg+OfRzhpr5+vgHv95/JXALGI= =J93h -----END PGP SIGNATURE-----