Fedora 25 OpenVPN Security Update: Addressed Remote DoS Vulnerabilities

OpenVPN is a robust and highly flexible tunneling application that uses all

of the encryption, authentication, and certification features of the

OpenSSL library to securely tunnel IP networks over a single UDP or TCP

port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library

for compression.

This update brings in the latest OpenVPN v2.4.2 release. This release contains

fixes for two authenticated remote DoS vulnerabilities (CVE-2017-7478 and

CVE-2017-7479). For more information see the upstream [security announcement](h

ttp://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits)

.

su -c 'dnf upgrade openvpn' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org