========================================================================== Ubuntu Security Notice USN-7411-1 April 03, 2025
openvpn vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.10 - Ubuntu 24.04 LTS Summary: OpenVPN could be made to crash if it received specially crafted network traffic. Software Description: - openvpn: virtual private network software Details: It was discovered that OpenVPN incorrectly handled certain malformed packets. A remote attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 openvpn 2.6.12-1ubuntu1.2 Ubuntu 24.04 LTS openvpn 2.6.12-0ubuntu0.24.04.3 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7411-1 CVE-2025-2704 Package Information: https://launchpad.net/ubuntu/+source/openvpn/2.6.12-1ubuntu1.2 https://launchpad.net/ubuntu/+source/openvpn/2.6.12-0ubuntu0.24.04.3
OpenPGP_signature.asc
Description: OpenPGP digital signature
