Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 24: Security Advisory for OpenVPN Update with Critical Issues

Updates to the latest upstream OpenVPN 2.3.17, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-5596f2f94d 2017-06-30 14:16:35.418105 --------------------------------------------------------------------------------Name : openvpn Product : Fedora 24 Version : 2.3.17 Release : 1.fc24 URL : Summary : A full-featured SSL VPN solution Description : OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for compression. --------------------------------------------------------------------------------Update Information: Updates to the latest upstream OpenVPN 2.3.17, containing security updates for CVE-2017-7508, CVE-2017-7520 and CVE-2017-7521. --------------------------------------------------------------------------------References: [ 1 ] Bug #1463643 - CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 CVE-2017-7522 openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17 [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1463643 [ 2 ] Bug #1463647 - openvpn-2.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1463647 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade openvpn' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Important security patch rolled out for OpenVPN in Fedora 24, fixing several weaknesses highlighted in the latest CVEs.. OpenVPN Update, Fedora Security, OpenVPN Patch. . Severity: Critical. LinuxSecurity.com Team

Jun 30, 2017 •Critical Fedora