Change log : openvpn package : Ubuntu

2.6.1-1ubuntu1.1

Published in lunar-updates on 2023-11-16

Published in lunar-security on 2023-11-16

openvpn (2.6.1-1ubuntu1.1) lunar-security; urgency=medium

  * SECURITY UPDATE: divide-by-zero via --fragment option
    - debian/patches/CVE-2023-46849.patch: remove saving initial frame code
      in src/openvpn/forward.c, src/openvpn/init.c, src/openvpn/openvpn.h.
    - CVE-2023-46849
  * SECURITY UPDATE: memory disclosure or code exec via use-after-free
    - debian/patches/CVE-2023-46850.patch: fix using to_link buffer after
      freed in src/openvpn/ssl.c.
    - CVE-2023-46850

 -- Marc Deslauriers <email address hidden>  Wed, 15 Nov 2023 13:15:33 -0500

Available diffs

diff from 2.6.1-1ubuntu1 (in Ubuntu) to 2.6.1-1ubuntu1.1 (3.1 KiB)

2.6.5-0ubuntu1.1

Published in mantic-updates on 2023-11-16

Published in mantic-security on 2023-11-16

openvpn (2.6.5-0ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: divide-by-zero via --fragment option
    - debian/patches/CVE-2023-46849.patch: remove saving initial frame code
      in src/openvpn/forward.c, src/openvpn/init.c, src/openvpn/openvpn.h.
    - CVE-2023-46849
  * SECURITY UPDATE: memory disclosure or code exec via use-after-free
    - debian/patches/CVE-2023-46850.patch: fix using to_link buffer after
      freed in src/openvpn/ssl.c.
    - CVE-2023-46850

 -- Marc Deslauriers <email address hidden>  Wed, 15 Nov 2023 13:12:32 -0500

Available diffs

diff from 2.6.5-0ubuntu1 (in Ubuntu) to 2.6.5-0ubuntu1.1 (2.9 KiB)

2.6.7-1ubuntu1

Published in noble-release on 2023-11-14

Deleted in noble-proposed (Reason: Moved to noble)

openvpn (2.6.7-1ubuntu1) noble; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.5-0ubuntu1 to 2.6.7-1ubuntu1 (172.7 KiB)

2.6.5-0ubuntu1

Superseded in noble-release on 2023-11-14

Published in mantic-release on 2023-07-20

Deleted in mantic-proposed (Reason: Moved to mantic)

openvpn (2.6.5-0ubuntu1) mantic; urgency=medium

  * New Upstream release 2.6.5 (LP: #2018095)
  * d/p/fix-dangling-pointer-in-pkcs11.patch:
    Remove - fixed upstream in 2.6.4
  * d/p/fix-memleak-in-dco_get_peer_stats_multi.patch:
    Remove - fixed upstream in 2.6.5

 -- Lena Voytek <email address hidden>  Tue, 11 Jul 2023 09:36:08 -0700

Available diffs

diff from 2.6.3-2ubuntu1 to 2.6.5-0ubuntu1 (18.0 KiB)

2.6.3-2ubuntu1

Superseded in mantic-release on 2023-07-20

Deleted in mantic-proposed on 2023-07-21 (Reason: Moved to mantic)

openvpn (2.6.3-2ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.3-1ubuntu1 to 2.6.3-2ubuntu1 (1.9 KiB)

2.6.3-1ubuntu1

Superseded in mantic-release on 2023-05-25

Deleted in mantic-proposed on 2023-05-26 (Reason: Moved to mantic)

openvpn (2.6.3-1ubuntu1) mantic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.1-1ubuntu1 to 2.6.3-1ubuntu1 (74.0 KiB)

2.6.1-1ubuntu1

Superseded in mantic-release on 2023-05-05

Published in lunar-release on 2023-03-31

Deleted in lunar-proposed (Reason: Moved to lunar)

openvpn (2.6.1-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.0-1ubuntu1 to 2.6.1-1ubuntu1 (73.8 KiB)

2.5.8-0ubuntu0.22.04.1

Published in jammy-proposed on 2023-04-14

openvpn (2.5.8-0ubuntu0.22.04.1) jammy; urgency=medium

  * New upstream releases 2.5.6-2.5.8 (LP: #2004676):
    - The version is being updated to the latest in 2.5.x rather than 2.6.x to
      avoid feature releases and focus on bug fixes
    - Updates:
      + OpenSSL3 support
      + pkcs11-helper upgrade to 1.28.4
      + allow running a default configuration with TLS libraries without BF-CBC
    - Bug Fixes Include:
      + CVE-2022-0547
      + Fix potential memory leaks in add_route() and add_route_ipv6()
      + Fix PATH_MAX build failure in auth-pam.c
      + Fix using --auth-token together with --management-client-auth
      + Fix clearing of username+password when using --auth-nocache
      + See https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn25 for
        additional bug fixes and information
  * Remove patches fixed upstream:
    - d/p/CVE-2022-0547.patch
      [Included in upstream release 2.5.6]
    - d/p/openssl-3/0001-Add-insecure-tls-cert-profile-options.patch
    - d/p/openssl-3/0002-Refactor-early-initialisation-and-uninitialisation-
      into-methods.patch
    - d/p/openssl-3/0003-Allow-loading-of-non-default-providers.patch
    - d/p/openssl-3/0004-Fix-allowing-showing-unsupported-ciphers-digests.patch
    - d/p/openssl-3/0005-Add-message-when-decoding-PKCS12-file-fails.patch
    - d/p/openssl-3/0006-Translate-OpenSSL-3.0-digest-names-to-OpenSSL-1.1-
      digest-names.patch
     [Included in upstream release 2.5.7]
    - d/p/openssl-3/0007-Allow-running-a-default-configuration-with-TLS-
      libraries-without-BF-CBC.patch
    - d/p/match-manpage-and-command-help.patch
      [Included in upstream release 2.5.8]

 -- Lena Voytek <email address hidden>  Fri, 03 Feb 2023 15:49:35 -0700

Available diffs

diff from 2.5.5-1ubuntu3.1 to 2.5.8-0ubuntu0.22.04.1 (179.6 KiB)

2.6.0-1ubuntu1

Superseded in lunar-release on 2023-03-31

Deleted in lunar-proposed on 2023-04-01 (Reason: Moved to lunar)

openvpn (2.6.0-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.0~rc2-1ubuntu1 to 2.6.0-1ubuntu1 (714.9 KiB)

2.6.0~rc2-1ubuntu1

Superseded in lunar-release on 2023-01-27

Deleted in lunar-proposed on 2023-01-28 (Reason: Moved to lunar)

openvpn (2.6.0~rc2-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.0~rc1-1ubuntu1 to 2.6.0~rc2-1ubuntu1 (40.3 KiB)

2.6.0~rc1-1ubuntu1

Superseded in lunar-release on 2023-01-17

Deleted in lunar-proposed on 2023-01-18 (Reason: Moved to lunar)

openvpn (2.6.0~rc1-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.0~git20221222-1ubuntu1 to 2.6.0~rc1-1ubuntu1 (13.0 KiB)

2.6.0~git20221222-1ubuntu1

Superseded in lunar-release on 2022-12-30

Deleted in lunar-proposed on 2022-12-31 (Reason: Moved to lunar)

openvpn (2.6.0~git20221222-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

2.6.0~git20221215+beta2-1ubuntu1

Superseded in lunar-proposed on 2022-12-24

openvpn (2.6.0~git20221215+beta2-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.0~git20221201-1ubuntu1 to 2.6.0~git20221215+beta2-1ubuntu1 (26.8 KiB)

2.6.0~git20221201-1ubuntu1

Superseded in lunar-release on 2022-12-28

Deleted in lunar-proposed on 2022-12-30 (Reason: Moved to lunar)

openvpn (2.6.0~git20221201-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.0~git20221116-1ubuntu1 to 2.6.0~git20221201-1ubuntu1 (40.7 KiB)

2.6.0~git20221116-1ubuntu1

Superseded in lunar-release on 2022-12-07

Deleted in lunar-proposed on 2022-12-08 (Reason: Moved to lunar)

openvpn (2.6.0~git20221116-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.0~git20220818-1ubuntu1 to 2.6.0~git20221116-1ubuntu1 (82.4 KiB)

2.5.5-1ubuntu3.1

Published in jammy-updates on 2022-11-16

Deleted in jammy-proposed (Reason: moved to -updates)

openvpn (2.5.5-1ubuntu3.1) jammy; urgency=medium

  * d/p/openssl-3/*.patch: backport upstream patch set to better support
    OpenSSL 3 (LP: #1975574)

 -- Lucas Kanashiro <email address hidden>  Thu, 14 Jul 2022 11:21:14 -0300

Available diffs

diff from 2.5.5-1ubuntu3 to 2.5.5-1ubuntu3.1 (10.1 KiB)

2.6.0~git20220818-1ubuntu1

Superseded in lunar-release on 2022-11-27

Obsolete in kinetic-release on 2023-11-13

Deleted in kinetic-proposed (Reason: Moved to kinetic)

openvpn (2.6.0~git20220818-1ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)

Available diffs

diff from 2.6.0~git20220518+dco-3ubuntu2 to 2.6.0~git20220818-1ubuntu1 (146.3 KiB)

2.6.0~git20220518+dco-3ubuntu2

Superseded in kinetic-release on 2022-08-22

Deleted in kinetic-proposed on 2022-08-23 (Reason: Moved to kinetic)

openvpn (2.6.0~git20220518+dco-3ubuntu2) kinetic; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
    - d/t/server-setup-with-ca:
      - cherry-pick change in easy-rsa autopkgtests to remove conflicting
        "vars" file.

 -- Gianfranco Costamagna <email address hidden>  Thu, 28 Jul 2022 08:58:35 +0200

Available diffs

2.6.0~git20220518+dco-3ubuntu1

Superseded in kinetic-proposed on 2022-07-28

openvpn (2.6.0~git20220518+dco-3ubuntu1) kinetic; urgency=medium

  * d/t/server-setup-with-ca:
    - cherry-pick change in easy-rsa autopkgtests to remove conflicting
      "vars" file.

 -- Gianfranco Costamagna <email address hidden>  Thu, 28 Jul 2022 09:08:04 +0200

Available diffs

diff from 2.6.0~git20220518+dco-3 (in Debian) to 2.6.0~git20220518+dco-3ubuntu1 (548 bytes)

2.6.0~git20220518+dco-2ubuntu4

Superseded in kinetic-proposed on 2022-07-28

openvpn (2.6.0~git20220518+dco-2ubuntu4) kinetic; urgency=medium

  * d/t/server-setup-with-ca:
    - cherry-pick change in easy-rsa autopkgtests to remove conflicting
      "vars" file.

 -- Gianfranco Costamagna <email address hidden>  Thu, 28 Jul 2022 08:58:35 +0200

Available diffs

diff from 2.6.0~git20220518+dco-2ubuntu3 to 2.6.0~git20220518+dco-2ubuntu4 (587 bytes)

2.6.0~git20220518+dco-3

Superseded in kinetic-proposed on 2022-07-28

openvpn (2.6.0~git20220518+dco-3) unstable; urgency=medium

  [ Lucas Kanashiro ]
  * d/t/server-setup-with-static-key: set cipher to be DES-EDE3-CBC
  * d/t/server-setup-with-static-key: use 'secret' to generate key
  * d/t/server-setup-with-*: use 'set -x' in the test scripts
  * d/t/control: add allow-stderr restriction

  [ Bernhard Schmidt ]
  * Import Ubuntu patch cherry-picked from upstream to translate OpenSSL 3.0
    digest names into OpenSSL 1.1 digest names (Closes: #1012129)

 -- Bernhard Schmidt <email address hidden>  Sun, 24 Jul 2022 17:13:47 +0200

Available diffs

diff from 2.6.0~git20220518+dco-2ubuntu4 (in Ubuntu) to 2.6.0~git20220518+dco-3 (9.2 KiB)

2.6.0~git20220518+dco-2ubuntu3

Superseded in kinetic-release on 2022-07-28

Deleted in kinetic-proposed on 2022-07-29 (Reason: Moved to kinetic)

openvpn (2.6.0~git20220518+dco-2ubuntu3) kinetic; urgency=medium

  * d/t/control: add allow-stderr restriction. With 'set -x' in place some
    messages are printed out in stderr.

 -- Lucas Kanashiro <email address hidden>  Thu, 14 Jul 2022 11:47:23 -0300

Available diffs

diff from 2.5.5-1ubuntu3 to 2.6.0~git20220518+dco-2ubuntu3 (1.1 MiB)
diff from 2.6.0~git20220518+dco-2ubuntu2 to 2.6.0~git20220518+dco-2ubuntu3 (560 bytes)

2.6.0~git20220518+dco-2ubuntu2

Superseded in kinetic-proposed on 2022-07-14

openvpn (2.6.0~git20220518+dco-2ubuntu2) kinetic; urgency=medium

  * d/t/server-setup-with-static-key: set cipher to be DES-EDE3-CBC. The
    default BF-CBC is deprecated, also CAST and RC2. For more information
    check the upstream documentation.
  * d/t/server-setup-with-static-key: use 'secret' instead of '--secret' when
    generating a key to fix a deprecation warning.
  * d/t/server-setup-with-*: use 'set -x' in the test scripts. This will
    facilitate future debugging.
  * d/p/openssl-3-support.patch: Translate OpenSSL 3.0 digest names to OpenSSL
    1.1 digest names (LP: #1975574).

 -- Lucas Kanashiro <email address hidden>  Mon, 11 Jul 2022 17:56:18 -0300

Available diffs

diff from 2.6.0~git20220518+dco-2ubuntu1 to 2.6.0~git20220518+dco-2ubuntu2 (2.5 KiB)

2.6.0~git20220518+dco-2ubuntu1

Superseded in kinetic-proposed on 2022-07-14

openvpn (2.6.0~git20220518+dco-2ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
  * Drop changes fixed in new upstream release:
    - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
    - d/p/OpenSSL3.patch: work around the deprecated algorithm mismatch between
      the OpenSSL3 branch and the OpenVPN 2.5 branch (LP #1945980)
    - debian/patches/CVE-2022-0547.patch: disallow multiple deferred
      authentication plug-ins in doc/man-sections/plugin-options.rst,
      src/openvpn/plugin.c.

Available diffs

diff from 2.5.5-1ubuntu3 to 2.6.0~git20220518+dco-2ubuntu1 (1.1 MiB)

2.4.4-2ubuntu1.7

Published in bionic-updates on 2022-03-24

Published in bionic-security on 2022-03-24

openvpn (2.4.4-2ubuntu1.7) bionic-security; urgency=medium

  * SECURITY UPDATE: authentication bypass via multiple deferred
    authentication plug-ins
    - debian/patches/CVE-2022-0547.patch: disallow multiple deferred
      authentication plug-ins in doc/openvpn.8, src/openvpn/plugin.c.
    - CVE-2022-0547

 -- Marc Deslauriers <email address hidden>  Tue, 22 Mar 2022 10:41:25 -0400

Available diffs

diff from 2.3.10-1ubuntu2.2 (in Ubuntu) to 2.4.4-2ubuntu1.7 (1.2 MiB)
diff from 2.4.4-2ubuntu1.6 (in Ubuntu) to 2.4.4-2ubuntu1.7 (2.1 KiB)
diff from 2.4.4-2ubuntu1.5 to 2.4.4-2ubuntu1.7 (3.1 KiB)

2.4.7-1ubuntu2.20.04.4

Published in focal-updates on 2022-03-24

Published in focal-security on 2022-03-24

openvpn (2.4.7-1ubuntu2.20.04.4) focal-security; urgency=medium

  * SECURITY UPDATE: authentication bypass via multiple deferred
    authentication plug-ins
    - debian/patches/CVE-2022-0547.patch: disallow multiple deferred
      authentication plug-ins in doc/openvpn.8, src/openvpn/plugin.c.
    - CVE-2022-0547

 -- Marc Deslauriers <email address hidden>  Tue, 22 Mar 2022 10:40:54 -0400

Available diffs

2.5.1-3ubuntu1.1

Obsolete in impish-updates on 2022-07-23

Obsolete in impish-security on 2022-07-23

openvpn (2.5.1-3ubuntu1.1) impish-security; urgency=medium

  * SECURITY UPDATE: authentication bypass via multiple deferred
    authentication plug-ins
    - debian/patches/CVE-2022-0547.patch: disallow multiple deferred
      authentication plug-ins in doc/openvpn.8, src/openvpn/plugin.c.
    - CVE-2022-0547

 -- Marc Deslauriers <email address hidden>  Tue, 22 Mar 2022 10:40:24 -0400

Available diffs

diff from 2.5.1-3ubuntu1 (in Ubuntu) to 2.5.1-3ubuntu1.1 (2.2 KiB)

2.5.5-1ubuntu3

Superseded in kinetic-release on 2022-07-16

Published in jammy-release on 2022-03-23

Deleted in jammy-proposed (Reason: Moved to jammy)

openvpn (2.5.5-1ubuntu3) jammy; urgency=medium

  * debian/patches/CVE-2022-0547.patch: updated to properly patch actual
    manpage file in doc/openvpn.8.

 -- Marc Deslauriers <email address hidden>  Tue, 22 Mar 2022 13:22:27 -0400

Available diffs

diff from 2.5.5-1ubuntu1 to 2.5.5-1ubuntu3 (2.2 KiB)
diff from 2.5.5-1ubuntu2 to 2.5.5-1ubuntu3 (1.5 KiB)

2.5.5-1ubuntu2

Superseded in jammy-proposed on 2022-03-22

openvpn (2.5.5-1ubuntu2) jammy; urgency=medium

  * SECURITY UPDATE: authentication bypass via multiple deferred
    authentication plug-ins
    - debian/patches/CVE-2022-0547.patch: disallow multiple deferred
      authentication plug-ins in doc/man-sections/plugin-options.rst,
      src/openvpn/plugin.c.
    - CVE-2022-0547

 -- Marc Deslauriers <email address hidden>  Tue, 22 Mar 2022 10:37:55 -0400

Available diffs

diff from 2.5.5-1ubuntu1 to 2.5.5-1ubuntu2 (2.1 KiB)

2.5.5-1ubuntu1

Superseded in jammy-release on 2022-03-23

Deleted in jammy-proposed on 2022-03-24 (Reason: Moved to jammy)

openvpn (2.5.5-1ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946884). Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
    - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
    - d/p/OpenSSL3.patch: work around the deprecated algorithm mismatch between
      the OpenSSL3 branch and the OpenVPN 2.5 branch (LP #1945980)

 -- Sergio Durigan Junior <email address hidden>  Wed, 23 Feb 2022 10:14:27 -0500

Available diffs

diff from 2.5.1-3ubuntu5 to 2.5.5-1ubuntu1 (90.1 KiB)

2.5.1-3ubuntu5

Superseded in jammy-release on 2022-02-25

Deleted in jammy-proposed on 2022-02-26 (Reason: Moved to jammy)

openvpn (2.5.1-3ubuntu5) jammy; urgency=medium

  * No-change rebuild to update maintainer scripts, see LP: 1959054

 -- Dave Jones <email address hidden>  Wed, 16 Feb 2022 17:16:30 +0000

Available diffs

diff from 2.5.1-3ubuntu4 to 2.5.1-3ubuntu5 (370 bytes)

2.5.1-3ubuntu4

Superseded in jammy-release on 2022-02-17

Deleted in jammy-proposed on 2022-02-18 (Reason: Moved to jammy)

openvpn (2.5.1-3ubuntu4) jammy; urgency=medium

  * d/p/OpenSSL3.patch: work around the deprecated algorithm mismatch between
    the OpenSSL3 branch and the OpenVPN 2.5 branch (LP: #1945980)

 -- Simon Chopin <email address hidden>  Thu, 18 Nov 2021 15:05:21 +0100

Available diffs

diff from 2.5.1-3ubuntu2 to 2.5.1-3ubuntu4 (1.4 KiB)
diff from 2.5.1-3ubuntu3 to 2.5.1-3ubuntu4 (1.3 KiB)

2.5.1-3ubuntu3

Superseded in jammy-proposed on 2021-12-01

openvpn (2.5.1-3ubuntu3) jammy; urgency=medium

  * No-change rebuild against openssl3

 -- Simon Chopin <email address hidden>  Wed, 01 Dec 2021 16:09:52 +0000

Available diffs

diff from 2.5.1-3ubuntu2 to 2.5.1-3ubuntu3 (328 bytes)

2.5.1-3ubuntu2

Superseded in jammy-release on 2021-12-06

Deleted in jammy-proposed on 2021-12-08 (Reason: Moved to jammy)

Deleted in impish-proposed on 2021-12-08 (Reason: Moved to jammy)

openvpn (2.5.1-3ubuntu2) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <email address hidden>  Thu, 07 Oct 2021 12:21:59 +0200

Available diffs

diff from 2.5.1-3ubuntu1 to 2.5.1-3ubuntu2 (339 bytes)

2.4.7-1ubuntu2.20.04.3

Superseded in focal-updates on 2022-03-24

Deleted in focal-proposed on 2022-03-25 (Reason: moved to -updates)

openvpn (2.4.7-1ubuntu2.20.04.3) focal; urgency=medium

  * d/p/increase-listen-backlog-queue-to-32.patch: Increase listen backlog queue
    to 32 (LP: #1934781)

 -- Athos Ribeiro <email address hidden>  Mon, 19 Jul 2021 16:26:19 -0300

Available diffs

2.4.4-2ubuntu1.6

Superseded in bionic-updates on 2022-03-24

Deleted in bionic-proposed on 2022-03-25 (Reason: moved to -updates)

openvpn (2.4.4-2ubuntu1.6) bionic; urgency=medium

  * d/p/increase-listen-backlog-queue-to-32.patch: Increase listen backlog queue
    to 32 (LP: #1934781)

 -- Athos Ribeiro <email address hidden>  Mon, 19 Jul 2021 19:53:26 -0300

Available diffs

2.5.1-3ubuntu1

Superseded in jammy-release on 2021-10-17

Obsolete in impish-release on 2022-07-23

Deleted in impish-proposed (Reason: Moved to impish)

openvpn (2.5.1-3ubuntu1) impish; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
    - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
  * Dropped changes:
    - d/t/server-setup-*: adapt tests to output of v2.5.0
      [Included in 2.5.1-3]

Available diffs

diff from 2.5.1-2ubuntu1 to 2.5.1-3ubuntu1 (2.6 KiB)

2.5.1-2ubuntu1

Superseded in impish-release on 2021-05-18

Deleted in impish-proposed on 2021-05-19 (Reason: Moved to impish)

openvpn (2.5.1-2ubuntu1) impish; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
    - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
    - d/t/server-setup-*: adapt tests to output of v2.5.0

 -- Athos Ribeiro <email address hidden>  Mon, 03 May 2021 17:56:39 -0300

Available diffs

diff from 2.5.1-1ubuntu1 to 2.5.1-2ubuntu1 (8.8 KiB)

2.5.1-1ubuntu1.1

Obsolete in hirsute-updates on 2022-07-23

Obsolete in hirsute-security on 2022-07-23

openvpn (2.5.1-1ubuntu1.1) hirsute-security; urgency=medium

  * SECURITY UPDATE: Authentication bypass with deferred authentication
    - debian/patches/CVE-2020-15078-pre1.patch: move context_auth from
      context_2 to tls_multi and name it multi_state in
      src/openvpn/forward.c, src/openvpn/multi.c, src/openvpn/openvpn.h,
      src/openvpn/push.c, src/openvpn/ssl_common.h.
    - debian/patches/CVE-2020-15078-pre2.patch: fix condition to generate
      session keys in src/openvpn/ssl.c.
    - debian/patches/CVE-2020-15078-1.patch: move auth_token_state from
      multi to key_state in src/openvpn/auth_token.c,
      src/openvpn/ssl_common.h, src/openvpn/ssl_verify.c,
      tests/unit_tests/openvpn/test_auth_token.c.
    - debian/patches/CVE-2020-15078-2.patch: ensure auth-token is only sent
      on a fully authenticated session in src/openvpn/ssl_verify.c.
    - debian/patches/CVE-2020-15078-3.patch: ensure key state is
      authenticated before sending push reply in src/openvpn/push.c.
    - CVE-2020-15078

 -- Marc Deslauriers <email address hidden>  Tue, 27 Apr 2021 10:03:40 -0400

Available diffs

diff from 2.5.1-1ubuntu1 (in Ubuntu) to 2.5.1-1ubuntu1.1 (9.5 KiB)

2.4.4-2ubuntu1.5

Superseded in bionic-updates on 2021-08-04

Superseded in bionic-security on 2022-03-24

openvpn (2.4.4-2ubuntu1.5) bionic-security; urgency=medium

  * SECURITY UPDATE: data channel v2 packet injection
    - debian/patches/CVE-2020-11810.patch: fix illegal client float in
      src/openvpn/multi.c.
    - CVE-2020-11810
  * SECURITY UPDATE: Authentication bypass with deferred authentication
    - debian/patches/CVE-2020-15078.patch: ensure key state is
      authenticated before sending push reply in src/openvpn/push.c.
    - CVE-2020-15078

 -- Marc Deslauriers <email address hidden>  Tue, 27 Apr 2021 10:54:29 -0400

Available diffs

diff from 2.4.4-2ubuntu1.3 (in Ubuntu) to 2.4.4-2ubuntu1.5 (2.9 KiB)
diff from 2.4.4-2ubuntu1 (in Ubuntu) to 2.4.4-2ubuntu1.5 (5.0 KiB)

2.4.7-1ubuntu2.20.04.2

Superseded in focal-updates on 2021-08-04

Superseded in focal-security on 2022-03-24

openvpn (2.4.7-1ubuntu2.20.04.2) focal-security; urgency=medium

  * SECURITY UPDATE: data channel v2 packet injection
    - debian/patches/CVE-2020-11810.patch: fix illegal client float in
      src/openvpn/multi.c.
    - CVE-2020-11810
  * SECURITY UPDATE: Authentication bypass with deferred authentication
    - debian/patches/CVE-2020-15078.patch: ensure key state is
      authenticated before sending push reply in src/openvpn/push.c.
    - CVE-2020-15078

 -- Marc Deslauriers <email address hidden>  Tue, 27 Apr 2021 10:51:26 -0400

Available diffs

diff from 2.4.7-1ubuntu2 (in Ubuntu) to 2.4.7-1ubuntu2.20.04.2 (2.9 KiB)

2.4.9-3ubuntu1.1

Obsolete in groovy-updates on 2021-12-22

Obsolete in groovy-security on 2021-12-22

openvpn (2.4.9-3ubuntu1.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Authentication bypass with deferred authentication
    - debian/patches/CVE-2020-15078.patch: ensure key state is
      authenticated before sending push reply in src/openvpn/push.c.
    - CVE-2020-15078

 -- Marc Deslauriers <email address hidden>  Tue, 27 Apr 2021 10:49:50 -0400

Available diffs

diff from 2.4.9-3ubuntu1 (in Ubuntu) to 2.4.9-3ubuntu1.1 (1.1 KiB)

2.5.1-1ubuntu1

Superseded in impish-release on 2021-05-07

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed on 2022-07-24 (Reason: moved to Release)

openvpn (2.5.1-1ubuntu1) hirsute; urgency=medium

  * Merge with Debian unstable (LP: #1917438). Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
    - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
      + d/t/server-setup-*: adapt tests to output of v2.5.0

 -- Utkarsh Gupta <email address hidden>  Tue, 02 Mar 2021 16:35:37 +0530

Available diffs

diff from 2.5.0-1ubuntu1 to 2.5.1-1ubuntu1 (19.8 KiB)

2.5.0-1ubuntu1

Superseded in hirsute-release on 2021-03-05

Deleted in hirsute-proposed on 2021-03-06 (Reason: moved to Release)

openvpn (2.5.0-1ubuntu1) hirsute; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
    - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
      [updated to match 2.5.0]
  * Dropped changes [in Debian since 2.5~beta3-1]
    - d/tests: add two DEP-8 test cases
      + d/t/server-setup-with-static-key: test the OpenVPN server side setup
        using a static key.
      + d/t/server-setup-with-ca: test the OpenVPN server side setup using a
        CA built with easy-rsa.
    - d/openvpn*.service: Drop reload support from systemd unit files
      (LP #1868127).  The current reload implementation (sending a SIGHUP
      signal to the process) fails, and the difference between reload and
      restart is not clear. Systemd does not require an implementation for
      reload.
  * Added Changes:
    - d/t/server-setup-*: adapt tests to output of v2.5.0

Available diffs

diff from 2.4.9-3ubuntu1 to 2.5.0-1ubuntu1 (808.9 KiB)

2.4.9-3ubuntu1

Superseded in hirsute-release on 2020-12-02

Obsolete in groovy-release on 2021-12-22

Deleted in groovy-proposed on 2021-12-23 (Reason: moved to Release)

openvpn (2.4.9-3ubuntu1) groovy; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP #1454725)
    - d/p/openvpn-fips-2.4.patch: Allow MD5 for PRF in FIPS mode openssl.
    - d/tests: add two DEP-8 test cases
      + d/t/server-setup-with-static-key: test the OpenVPN server side setup
        using a static key.
      + d/t/server-setup-with-ca: test the OpenVPN server side setup using a
        CA built with easy-rsa.
    - d/openvpn*.service: Drop reload support from systemd unit files
      (LP #1868127).  The current reload implementation (sending a SIGHUP
      signal to the process) fails, and the difference between reload and
      restart is not clear. Systemd does not require an implementation for
      reload.

 -- Lucas Kanashiro <email address hidden>  Tue, 18 Aug 2020 08:42:11 -0300

Available diffs

diff from 2.4.9-2ubuntu2 to 2.4.9-3ubuntu1 (2.2 KiB)

2.4.7-1ubuntu2.20.04.1

Deleted in focal-proposed on 2021-05-10 (Reason: moved to -updates)

openvpn (2.4.7-1ubuntu2.20.04.1) focal; urgency=medium

  * Drop reload support from systemd unit files (LP: #1868127)

 -- Lucas Kanashiro <email address hidden>  Wed, 27 May 2020 19:19:47 -0300

Available diffs

diff from 2.4.7-1ubuntu2 to 2.4.7-1ubuntu2.20.04.1 (896 bytes)

2.4.7-1ubuntu2.19.10.1

Obsolete in eoan-updates on 2020-12-29

Obsolete in eoan-proposed on 2020-12-29

openvpn (2.4.7-1ubuntu2.19.10.1) eoan; urgency=medium

  * Drop reload support from systemd unit files (LP: #1868127)

 -- Lucas Kanashiro <email address hidden>  Wed, 27 May 2020 19:25:32 -0300

Available diffs

diff from 2.4.7-1ubuntu2 to 2.4.7-1ubuntu2.19.10.1 (890 bytes)

2.4.4-2ubuntu1.4

Deleted in bionic-proposed on 2021-05-10 (Reason: moved to -updates)

openvpn (2.4.4-2ubuntu1.4) bionic; urgency=medium

  * Drop reload support from systemd unit files (LP: #1868127)

 -- Lucas Kanashiro <email address hidden>  Wed, 27 May 2020 19:36:40 -0300

Available diffs

diff from 2.4.4-2ubuntu1.3 to 2.4.4-2ubuntu1.4 (876 bytes)

2.4.9-2ubuntu2

Superseded in groovy-release on 2020-08-18

Deleted in groovy-proposed on 2020-08-19 (Reason: moved to Release)

openvpn (2.4.9-2ubuntu2) groovy; urgency=medium

  * Drop reload support from systemd unit files (LP: #1868127)

 -- Lucas Kanashiro <email address hidden>  Tue, 26 May 2020 19:04:33 -0300

Available diffs

diff from 2.4.9-2ubuntu1 to 2.4.9-2ubuntu2 (845 bytes)

2.4.9-2ubuntu1

Superseded in groovy-release on 2020-05-27

Deleted in groovy-proposed on 2020-05-29 (Reason: moved to Release)

openvpn (2.4.9-2ubuntu1) groovy; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - d/control: Demote easy-rsa to Suggests (universe package).
    - debian/openvpn@.service: Add '--script-security 2' similar to what
      got added to debian/openvpn.init.d ages ago (LP 1454725)
    - Allow MD5 for PRF in FIPS mode openssl.
  * Added changes:
    - d/tests: add two DEP-8 test cases
      + d/t/server-setup-with-static-key: test the OpenVPN server side setup
        using a static key.
      + d/t/server-setup-with-ca: test the OpenVPN server side setup using a
        CA built with easy-rsa.

Available diffs

diff from 2.4.7-1ubuntu2 to 2.4.9-2ubuntu1 (62.7 KiB)

Ubuntuopenvpn package

Change log for openvpn package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
openvpn package