Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 25: 2017-0639fb1490 Critical: OpenVPN Security Update

Updates to the latest upstream OpenVPN 2.4.3, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521. This update also re-enables automatic restart of OpenVPN on the next updates. For this update, the restart needs to be done manually.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-0639fb1490 2017-06-23 14:18:21.689274 --------------------------------------------------------------------------------Name : openvpn Product : Fedora 25 Version : 2.4.3 Release : 1.fc25 URL : Summary : A full-featured SSL VPN solution Description : OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for compression. --------------------------------------------------------------------------------Update Information: Updates to the latest upstream OpenVPN 2.4.3, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521. This update also re-enables automatic restart of OpenVPN on the next updates. For this update, the restart needs to be done manually. --------------------------------------------------------------------------------References: [ 1 ] Bug #1463643 - CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1463643 [ 2 ] Bug #1463647 - openvpn-2.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1463647 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade openvpn' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . OpenVPN 2.4.3 security patch launched for Fedora 25 tackling severe flaws and enhancing restart capabilities.. OpenVPN Update,Fedora Security,Upstream Security Fixes,Open Source VPN. . Severity: Critical. LinuxSecurity.com Team

Jun 23, 2017 •Critical Fedora