Your message dated Mon, 13 Oct 2014 16:49:06 +0000
with message-id <[email protected]>
and subject line Bug#764651: fixed in openvpn 2.3.4-3
has caused the Debian Bug report #764651,
regarding openvpn: leaks /tmp/openvpn_cc_* files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
764651: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764651
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: openvpn
Version: 2.3.2-9
Severity: important
Control: forwarded -1 [email protected]

Hello,

Our openvpn server got out of free inodes in /tmp, making it quite
completely nonworking.  This is due to some codepath in multi.c which
does not remove its temporary file (when a plugin callback returns an
error, or a client-connect script returns an error).  Please see the
attached patch which fixes this.

Samuel

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'buildd-unstable'), (500, 'unstable'), 
(500, 'stable'), (500, 'oldstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.17.0 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages openvpn depends on:
ii  cdebconf [debconf-2.0]  0.192
ii  debconf [debconf-2.0]   1.5.53
ii  initscripts             2.88dsf-53.4
ii  iproute2                3.16.0-2
ii  libc6                   2.19-11
ii  liblzo2-2               2.08-1
ii  libpam0g                1.1.8-3.1
ii  libpkcs11-helper1       1.11-2
ii  libssl1.0.0             1.0.1i-2

Versions of packages openvpn recommends:
ii  easy-rsa  2.2.2-1

Versions of packages openvpn suggests:
ii  openssl     1.0.1i-2
ii  resolvconf  1.75

-- debconf information excluded

-- 
Samuel
Progress (n.): The process through which the Internet has evolved from
smart people in front of dumb terminals to dumb people in front of smart
terminals.
--- a/src/openvpn/multi.c
+++ b/src/openvpn/multi.c
@@ -1692,6 +1692,9 @@ multi_connection_established (struct mul
            {
              msg (M_WARN, "WARNING: client-connect plugin call failed");
              cc_succeeded = false;
+             if (!platform_unlink (dc_file))
+               msg (D_MULTI_ERRORS, "MULTI: problem deleting temporary file: 
%s",
+                    dc_file);
            }
          else
            {
@@ -1750,7 +1753,12 @@ multi_connection_established (struct mul
              ++cc_succeeded_count;
            }
          else
-           cc_succeeded = false;
+           {
+             cc_succeeded = false;
+             if (!platform_unlink (dc_file))
+               msg (D_MULTI_ERRORS, "MULTI: problem deleting temporary file: 
%s",
+                    dc_file);
+           }
         script_failed:
          argv_reset (&argv);
        }

--- End Message ---
--- Begin Message ---
Source: openvpn
Source-Version: 2.3.4-3

We believe that the bug you reported is fixed in the latest version of
openvpn, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alberto Gonzalez Iniesta <[email protected]> (supplier of updated openvpn 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 13 Oct 2014 18:24:03 +0200
Source: openvpn
Binary: openvpn
Architecture: source amd64
Version: 2.3.4-3
Distribution: unstable
Urgency: medium
Maintainer: Alberto Gonzalez Iniesta <[email protected]>
Changed-By: Alberto Gonzalez Iniesta <[email protected]>
Description:
 openvpn    - virtual private network daemon
Closes: 764651
Changes:
 openvpn (2.3.4-3) unstable; urgency=medium
 .
   * Apply patch by Samuel Thibault to clean up temporary files.
     (Closes: #764651). Thanks Samuel!
Checksums-Sha1:
 23079018a2bcd99506b91b49ae974bdf96139d0a 1984 openvpn_2.3.4-3.dsc
 b7ae225170ae6d0e2bc5d8212e2f5605ab387812 106768 openvpn_2.3.4-3.debian.tar.xz
 b2ba57774cd4afaba7c061fb112ccbefa5d9acf5 467300 openvpn_2.3.4-3_amd64.deb
Checksums-Sha256:
 c241103420f8bb5d1afcb5d13d98b155326bdc1043c54d8dd1c9dc1d29da91fc 1984 
openvpn_2.3.4-3.dsc
 225778b17276b31e69ae6e9a508baf506c99e53a65237f5d09154387a36f2995 106768 
openvpn_2.3.4-3.debian.tar.xz
 7edf1e1631c42d88be19ed6cd2d65ccc0e03a6a2b873b867805e811267ae6dcb 467300 
openvpn_2.3.4-3_amd64.deb
Files:
 7c44f54ea12799d22f5e87e66282e4e9 1984 net optional openvpn_2.3.4-3.dsc
 f56883a4c89cadaf7c434ad98545509a 106768 net optional 
openvpn_2.3.4-3.debian.tar.xz
 80ba8d90d1436aacb42ab91bfb8adb83 467300 net optional openvpn_2.3.4-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Btmy
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to