Bugzilla – Bug 9588
unknown bug
Last modified: 2005-10-21 15:01:47 UTC
openvpn 2.0.1 has been released to fix several DoS attacks found in version 2.0. Currently we only have 1.x in stable, but I can't find definitive word if this affects 1.x as well. The upstream release specifically says 2.0, but announcements from bugtraq/etc. list the 1.x branch as well.
This is fixed in devel and test if we want to push it on. However, there is one bug with the current version of the spell that we may want to fix first, as it is able to break the new init.d script that comes with openvpn. I can fix this tonight if we want to wait for it. --
That bug is fixed if we want this to go to stable. IMO we do, better safe than sorry, especially when it's a security tool. --
aadding security lead --
Thanks, integrated to stable-rc and stable at 64590. --
thanks, marking fixed then --