Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #182508 > unrolled thread

openvpn updates?

Started by"Perry E. Metzger" <perry@piermont.com>
First post2017-06-22 16:30 +0200
Last post2017-06-28 00:50 +0200
Articles 9 — 5 participants

Back to article view | Back to linux.debian.user

Contents

  openvpn updates? "Perry E. Metzger" <perry@piermont.com> - 2017-06-22 16:30 +0200
    Re: openvpn updates? Adrian Bunk <bunk@debian.org> - 2017-06-22 22:30 +0200
      Re: openvpn updates? Mark Fletcher <mark27q1@gmail.com> - 2017-06-23 02:10 +0200
        Re: openvpn updates? Reco <recoverym4n@gmail.com> - 2017-06-23 11:10 +0200
      Re: openvpn updates? "Perry E. Metzger" <perry@piermont.com> - 2017-06-27 17:20 +0200
        Re: openvpn updates? David Wright <deblis@lionunicorn.co.uk> - 2017-06-27 17:50 +0200
          Re: openvpn updates? David Wright <deblis@lionunicorn.co.uk> - 2017-06-27 18:20 +0200
          Re: openvpn updates? "Perry E. Metzger" <perry@piermont.com> - 2017-06-27 18:20 +0200
        Re: openvpn updates? Adrian Bunk <bunk@debian.org> - 2017-06-28 00:50 +0200

#182508 — openvpn updates?

From"Perry E. Metzger" <perry@piermont.com>
Date2017-06-22 16:30 +0200
Subjectopenvpn updates?
Message-ID<tVbhp-5Uv-35@gated-at.bofh.it>
There was a security advisory against openvpn a couple of days ago;
just wondering when updated packages are likely to show up?

-- 
Perry E. Metzger		perry@piermont.com

[toc] | [next] | [standalone]

#182524

FromAdrian Bunk <bunk@debian.org>
Date2017-06-22 22:30 +0200
Message-ID<tVgTL-15s-1@gated-at.bofh.it>
In reply to#182508
On Thu, Jun 22, 2017 at 10:20:09AM -0400, Perry E. Metzger wrote:
> There was a security advisory against openvpn a couple of days ago;

Yesterday, not a couple of days ago.

> just wondering when updated packages are likely to show up?

unstable is already fixed.

stable and oldstable will be fixed soon.

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

[toc] | [prev] | [next] | [standalone]

#182526

FromMark Fletcher <mark27q1@gmail.com>
Date2017-06-23 02:10 +0200
Message-ID<tVkkG-3iz-13@gated-at.bofh.it>
In reply to#182524

[Multipart message — attachments visible in raw view] — view raw

On Fri, 23 Jun 2017 at 05:27, Adrian Bunk <bunk@debian.org> wrote:

> On Thu, Jun 22, 2017 at 10:20:09AM -0400, Perry E. Metzger wrote:
> > There was a security advisory against openvpn a couple of days ago;
>
> Yesterday, not a couple of days ago



Holy hell, I missed that. Thanks for waking me up! Any chance someone could
post a link with details?

Mark

[toc] | [prev] | [next] | [standalone]

#182532

FromReco <recoverym4n@gmail.com>
Date2017-06-23 11:10 +0200
Message-ID<tVsLg-eC-11@gated-at.bofh.it>
In reply to#182526
	Hi.

On Fri, 23 Jun 2017 00:03:30 +0000
Mark Fletcher <mark27q1@gmail.com> wrote:

> On Fri, 23 Jun 2017 at 05:27, Adrian Bunk <bunk@debian.org> wrote:
> 
> > On Thu, Jun 22, 2017 at 10:20:09AM -0400, Perry E. Metzger wrote:
> > > There was a security advisory against openvpn a couple of days ago;
> >
> > Yesterday, not a couple of days ago
> 
> 
> 
> Holy hell, I missed that. Thanks for waking me up! Any chance someone could
> post a link with details?

It's 'Open Issues' here:

https://security-tracker.debian.org/tracker/source-package/openvpn

Reco

[toc] | [prev] | [next] | [standalone]

#182747

From"Perry E. Metzger" <perry@piermont.com>
Date2017-06-27 17:20 +0200
Message-ID<tX0rv-2jq-1@gated-at.bofh.it>
In reply to#182524
On Thu, 22 Jun 2017 23:10:21 +0300 Adrian Bunk <bunk@debian.org>
wrote:
> On Thu, Jun 22, 2017 at 10:20:09AM -0400, Perry E. Metzger wrote:
> > There was a security advisory against openvpn a couple of days
> > ago;  
> 
> Yesterday, not a couple of days ago.
> 
> > just wondering when updated packages are likely to show up?  
> 
> unstable is already fixed.
> 
> stable and oldstable will be fixed soon.

Any news on this? Apparently this is remotely exploitable though not
in ordinary configurations.

Perry
-- 
Perry E. Metzger		perry@piermont.com

[toc] | [prev] | [next] | [standalone]

#182749

FromDavid Wright <deblis@lionunicorn.co.uk>
Date2017-06-27 17:50 +0200
Message-ID<tX0Uy-2xM-37@gated-at.bofh.it>
In reply to#182747
On Tue 27 Jun 2017 at 11:11:47 (-0400), Perry E. Metzger wrote:
> On Thu, 22 Jun 2017 23:10:21 +0300 Adrian Bunk <bunk@debian.org>
> wrote:
> > On Thu, Jun 22, 2017 at 10:20:09AM -0400, Perry E. Metzger wrote:
> > > There was a security advisory against openvpn a couple of days
> > > ago;  
> > 
> > Yesterday, not a couple of days ago.
> > 
> > > just wondering when updated packages are likely to show up?  
> > 
> > unstable is already fixed.
> > 
> > stable and oldstable will be fixed soon.
> 
> Any news on this? Apparently this is remotely exploitable though not
> in ordinary configurations.

In what respect do

 https://security-tracker.debian.org/tracker/source-package/openvpn

and

 https://tracker.debian.org/pkg/openvpn

let you down?

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#182751

FromDavid Wright <deblis@lionunicorn.co.uk>
Date2017-06-27 18:20 +0200
Message-ID<tX1nz-2Ys-15@gated-at.bofh.it>
In reply to#182749
On Tue 27 Jun 2017 at 12:09:47 (-0400), Perry E. Metzger wrote:
> On Tue, 27 Jun 2017 10:48:26 -0500 David Wright
> <deblis@lionunicorn.co.uk> wrote:
> > > Any news on this? Apparently this is remotely exploitable though
> > > not in ordinary configurations.  
> > 
> > In what respect do
> > 
> >  https://security-tracker.debian.org/tracker/source-package/openvpn
> > 
> > and
> > 
> >  https://tracker.debian.org/pkg/openvpn
> > 
> > let you down?
> 
> In the respect that I didn't know they existed and I could look at
> them?

OK. Perhaps your email filters were a little too aggressive and
you missed seeing Reco's post archived as

https://lists.debian.org/debian-user/2017/06/msg00905.html

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#182753

From"Perry E. Metzger" <perry@piermont.com>
Date2017-06-27 18:20 +0200
Message-ID<tX1nz-2Ys-17@gated-at.bofh.it>
In reply to#182749
On Tue, 27 Jun 2017 10:48:26 -0500 David Wright
<deblis@lionunicorn.co.uk> wrote:
> > Any news on this? Apparently this is remotely exploitable though
> > not in ordinary configurations.  
> 
> In what respect do
> 
>  https://security-tracker.debian.org/tracker/source-package/openvpn
> 
> and
> 
>  https://tracker.debian.org/pkg/openvpn
> 
> let you down?

In the respect that I didn't know they existed and I could look at
them?

Perry
-- 
Perry E. Metzger		perry@piermont.com

[toc] | [prev] | [next] | [standalone]

#182765

FromAdrian Bunk <bunk@debian.org>
Date2017-06-28 00:50 +0200
Message-ID<tX7sZ-6Yu-13@gated-at.bofh.it>
In reply to#182747
On Tue, Jun 27, 2017 at 11:11:47AM -0400, Perry E. Metzger wrote:
> On Thu, 22 Jun 2017 23:10:21 +0300 Adrian Bunk <bunk@debian.org>
> wrote:
> > On Thu, Jun 22, 2017 at 10:20:09AM -0400, Perry E. Metzger wrote:
> > > There was a security advisory against openvpn a couple of days
> > > ago;  
> > 
> > Yesterday, not a couple of days ago.
> > 
> > > just wondering when updated packages are likely to show up?  
> > 
> > unstable is already fixed.
> > 
> > stable and oldstable will be fixed soon.
> 
> Any news on this?
>...

https://lists.debian.org/debian-security-announce/2017/msg00161.html

> Perry

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web