[ GLSA 201611-02 ] OpenVPN

[GLSA]

Gentoo Linux Security Advisory

Title: OpenVPN: Multiple vulnerabilities (GLSA 201611-02)
Severity: normal
Exploitable: remote
Date: November 01, 2016
Bug(s): #582902, #592070
ID: 201611-02

Synopsis

Multiple vulnerabilities have been found in OpenVPN, the worst of
which allows remote attackers to read encrypted traffic.


Background

OpenVPN is a multi-platform, full-featured SSL VPN solution.

Affected Packages

Package: net-misc/openvpn
Vulnerable: < 2.3.12
Unaffected: >= 2.3.12
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in OpenVPN. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker may be able to recover plaintext from encrypted
communications.


Workaround

There is no known workaround at this time.

Resolution

All OpenVPN users should upgrade to the latest version: