Security update for openvpn
This update for openvpn fixes the following issues:
- CVE-2016-6329: Show which ciphers should no longer be used in openvpn --show-ciphers (bsc#995374)
- CVE-2017-7478: openvpn: Authenticated user can DoS server by using a big payload in P_CONTROL (bsc#1038709)
- CVE-2017-7479: openvpn: Denial of Service due to Exhaustion of Packet-ID counter (bsc#1038711)
- Hardening measures found by internal audit (bsc#1038713)
This update was imported from the SUSE:SLE-12:Update update project.
-
Submitted by
Nirmoy Das (ndas)
Fixed bugs
bnc#995374
VUL-0: CVE-2016-6329: openvpn: affected by 64bit cipher birthday attack (SWEET32)
bnc#1038709
VUL-0: CVE-2017-7478: openvpn: Authenticated user can DoS server by using a big payload in P_CONTROL
bnc#1038711
VUL-0: CVE-2017-7479: openvpn: Denial of Service due to Exhaustion of Packet-ID counter
bnc#1038713
VUL-1: openvpn: Include hardening measures found by audit
