Bug 9588 - unknown bug
: unknown bug
Status: CLOSED FIXED
Product: Codex
Classification: Unclassified
Component: net
: stable-rc grimoire
: Other other
: P2 normal
Assigned To: Grimoire Bug List
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2005-08-23 20:52 UTC by Jeremy Blosser
Modified: 2005-10-21 15:01 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jeremy Blosser 2005-08-23 20:52:20 UTC
openvpn 2.0.1 has been released to fix several DoS attacks found in version 2.0.
 Currently we only have 1.x in stable, but I can't find definitive word if this
affects 1.x as well.  The upstream release specifically says 2.0, but
announcements from bugtraq/etc. list the 1.x branch as well.
Comment 1 Jeremy Blosser 2005-08-23 20:53:52 UTC
This is fixed in devel and test if we want to push it on.  However, there is one
bug with the current version of the spell that we may want to fix first, as it
is able to break the new init.d script that comes with openvpn.  I can fix this
tonight if we want to wait for it.

-- 
Comment 2 Jeremy Blosser 2005-08-24 04:21:08 UTC
That bug is fixed if we want this to go to stable.  IMO we do, better safe than
sorry, especially when it's a security tool.

--
Comment 3 Jeremy Blosser 2005-08-24 04:21:09 UTC
That bug is fixed if we want this to go to stable.  IMO we do, better safe than
sorry, especially when it's a security tool.

-- 
Comment 4 Jeremy Blosser 2005-08-24 19:45:10 UTC
aadding security lead

-- 
Comment 5 Thomas Houssin 2005-08-24 21:56:38 UTC
Thanks, integrated to stable-rc and stable at 64590.

-- 
Comment 6 Jeremy Blosser 2005-08-24 22:27:04 UTC
thanks, marking fixed then

--