UbuntuUpdates.org

Package "openconnect"

Name: openconnect

Description:

open client for Cisco AnyConnect VPN
Latest version: 7.08-3ubuntu0.18.04.2
Release: bionic (18.04)
Level: updates
Repository: universe
Homepage: http://www.infradead.org/openconnect/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "openconnect"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "openconnect" in Bionic

Repository Area Version
base universe 7.08-3
security universe 7.08-3ubuntu0.18.04.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 7.08-3ubuntu0.18.04.2 2020-10-01 15:06:17 UTC

  openconnect (7.08-3ubuntu0.18.04.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Buffer overflow vulnerability
    - d/p/Fix-buffer-overflow-with-chunked-HTTP-handling-CVE-2.patch: Buffer
      overflow with chunked HTTP handling.
    - CVE-2019-16239
  * SECURITY UPDATE: Fix crash when HTTP has timeout
    - d/p/Close-HTTPS-connection-on-failure-returns-from-proce.patch: HTTPS
      connection on failure returns from process_http_response().

 -- Paulo Flabiano Smorigo <email address hidden> Tue, 29 Sep 2020 19:05:41 +0000
Source diff to previous version
CVE-2019-16239 process_http_response in OpenConnect before 8.05 has a Buffer Overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes.

Version: 7.08-3ubuntu0.18.04.1 2019-04-15 18:06:42 UTC

  openconnect (7.08-3ubuntu0.18.04.1) bionic; urgency=medium

  * debian/patches/git-juniper-realm.patch:
    - Fix issue causing front-ends/GUIs to be insensitive to changes
      in the Juniper realm dropdown (lp: #1764047)

 -- Sebastien Bacher <email address hidden> Fri, 15 Mar 2019 00:23:01 +0100
1764047 Unable to switch realm on authentication dialog


About   -   Send Feedback to @ubuntu_updates