tocsin

Debian/openvpn: unknown

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.

Action: Upgrade openvpn to 2.0.6-1 or later.

Affected

introducedfixedlast affected
02.0.6-1-

Fixed versions

2.0.6-1

Sources

published · modified · JSON