gpp_maybe Security update for openvpn

SUSE-SLE-SERVER-12-SP2-2017-998

This update for openvpn fixes the following issues: - CVE-2016-6329: Show which ciphers should no longer be used in openvpn --show-ciphers (bsc#995374) - CVE-2017-7478: openvpn: Authenticated user can DoS server by using a big payload in P_CONTROL (bsc#1038709) - CVE-2017-7479: openvpn: Denial of Service due to Exhaustion of Packet-ID counter (bsc#1038711) - Hardening measures found by internal audit (bsc#1038713)

• Release Date
  Jun 20 2017
• References
  Bugzilla: 995374, 1038709, 1038711, 1038713
  CVEs: CVE-2017-7478, CVE-2017-7479, CVE-2016-6329
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.3.8-16.14.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.3.8-16.14.1 lock rpm

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.3.8-16.14.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.3.8-16.14.1 lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.3.8-16.14.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.3.8-16.14.1 lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.3.8-16.14.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.3.8-16.14.1 lock rpm