Package "openvpn"

Name: openvpn


virtual private network daemon

Latest version: 2.4.4-2ubuntu1.5
Release: bionic (18.04)
Level: security
Repository: main
Homepage: https://openvpn.net/


Download "openvpn"

Other versions of "openvpn" in Bionic

Repository Area Version
base main 2.4.4-2ubuntu1
updates main 2.4.4-2ubuntu1.6


Version: 2.4.4-2ubuntu1.5 2021-05-04 13:06:19 UTC

  openvpn (2.4.4-2ubuntu1.5) bionic-security; urgency=medium

  * SECURITY UPDATE: data channel v2 packet injection
    - debian/patches/CVE-2020-11810.patch: fix illegal client float in
    - CVE-2020-11810
  * SECURITY UPDATE: Authentication bypass with deferred authentication
    - debian/patches/CVE-2020-15078.patch: ensure key state is
      authenticated before sending push reply in src/openvpn/push.c.
    - CVE-2020-15078

 -- Marc Deslauriers <email address hidden> Tue, 27 Apr 2021 10:54:29 -0400

CVE-2020-11810 An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally
CVE-2020-15078 OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with defe

About   -   Send Feedback to @ubuntu_updates