MDVSA-2014:246: openvpn

Updated openvpn packages fix security vulnerability:

Dragana Damjanovic discovered that OpenVPN incorrectly handled certain
control channel packets. An authenticated attacker could use this
issue to cause an OpenVPN server to crash, resulting in a denial of
service (CVE-2014-8104).

The openvpn packages has been updated to the 2.3.2 version and patched
to correct this issue.

Leave a Reply