Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 580
Alerts This Week
Warning Icon 1 580

SUSE: 2017:1620-1 Critical: OpenVPN Vulnerability Advisory

suse
Calendar Grey June 20, 2017
Dist Suse Esm H88
SUSE releases significant upgrade for OpenVPN, resolving numerous security flaws, such as Denial of Service vulnerabilities and critical patches.
An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one errata is no...

Summary

This update for openvpn fixes the following issues: - CVE-2016-6329: Show which ciphers should no longer be used in openvpn --show-ciphers (bsc#995374) - CVE-2017-7478: openvpn: Authenticated user can DoS server by using a big payload in P_CONTROL (bsc#1038709) - CVE-2017-7479: openvpn: Denial of Service due to Exhaustion of Packet-ID counter (bsc#1038711) - Hardening measures found by internal audit (bsc#1038713) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-998=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-998=1 - SUSE Linux Enterprise Desktop 12-SP2:

Topics%20covered

Topics Covered

security advisory security update DoS important patch management SUSE OpenVPN

References

#1038709 #1038711 #1038713 #995374

Cross- CVE-2016-6329 CVE-2017-7478 CVE-2017-7479

Affected Products:

SUSE Linux Enterprise Server for Raspberry Pi 12-SP2

SUSE Linux Enterprise Server 12-SP2

SUSE Linux Enterprise Desktop 12-SP2

https://www.suse.com/security/cve/CVE-2016-6329.html

https://www.suse.com/security/cve/CVE-2017-7478.html

https://www.suse.com/security/cve/CVE-2017-7479.html

https://bugzilla.suse.com/1038709

https://bugzilla.suse.com/1038711

https://bugzilla.suse.com/1038713

https://bugzilla.suse.com/995374

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:1622-1
Rating: important

Topics%20covered

Topics Covered

security advisory security update DoS important patch management SUSE OpenVPN

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.