Minimal patch from James Yonan (upstream) This patch simply removes the affected features, which is probably a little too excessive for our taste.
** Attachment added: "openvpn-2.1_rc7.diff" http://launchpadlibrarian.net/17309060/openvpn-2.1_rc7.diff -- [CVE-2008-3459] OpenVPN vulnerability allows arbitrary command execution via crafted configuration https://bugs.launchpad.net/bugs/256621 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openvpn in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs