Security update for openvpn SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2017:2838-1 Final 1 1 2017-10-24T09:59:40Z current 2017-10-24T09:59:40Z 2017-10-24T09:59:40Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openvpn This update for openvpn fixes the following security issues: - CVE-2017-12166: OpenVPN was vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution. (bsc#1060877). - CVE-2016-6329: Now show which ciphers should no longer be used in openvpn --show-ciphers to avoid the SWEET32 attack (bsc#995374) - CVE-2017-7478: OpenVPN was vulnerable to unauthenticated Denial of Service of server via received large control packet. (bsc#1038709) - CVE-2017-7479: OpenVPN was vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker. (bsc#1038711) - Some other hardening fixes have also been applied (bsc#1038713) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sleposp3-openvpn-13322,slessp3-openvpn-13322,slessp4-openvpn-13322 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2017/suse-su-20172838-1/ Link for SUSE-SU-2017:2838-1 https://lists.opensuse.org/opensuse-security-announce/2017-10/msg00070.html E-Mail link for SUSE-SU-2017:2838-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1038709 SUSE Bug 1038709 https://bugzilla.suse.com/1038711 SUSE Bug 1038711 https://bugzilla.suse.com/1038713 SUSE Bug 1038713 https://bugzilla.suse.com/1060877 SUSE Bug 1060877 https://bugzilla.suse.com/995374 SUSE Bug 995374 https://www.suse.com/security/cve/CVE-2016-6329/ SUSE CVE CVE-2016-6329 page https://www.suse.com/security/cve/CVE-2017-12166/ SUSE CVE CVE-2017-12166 page https://www.suse.com/security/cve/CVE-2017-7478/ SUSE CVE CVE-2017-7478 page https://www.suse.com/security/cve/CVE-2017-7479/ SUSE CVE CVE-2017-7479 page SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 openvpn-2.0.9-143.47.3.1 openvpn-auth-pam-plugin-2.0.9-143.47.3.1 openvpn-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 openvpn-auth-pam-plugin-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 openvpn-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS openvpn-auth-pam-plugin-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS openvpn-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA openvpn-auth-pam-plugin-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA openvpn-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 openvpn-auth-pam-plugin-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Server 11 SP4 openvpn-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 openvpn-auth-pam-plugin-2.0.9-143.47.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack. CVE-2016-6329 SUSE Linux Enterprise Point of Sale 11 SP3:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP4:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP4:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172838-1/ https://www.suse.com/security/cve/CVE-2016-6329.html CVE-2016-6329 https://bugzilla.suse.com/1026864 SUSE Bug 1026864 https://bugzilla.suse.com/995374 SUSE Bug 995374 OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution. CVE-2017-12166 SUSE Linux Enterprise Point of Sale 11 SP3:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP4:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP4:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172838-1/ https://www.suse.com/security/cve/CVE-2017-12166.html CVE-2017-12166 https://bugzilla.suse.com/1060877 SUSE Bug 1060877 OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2. CVE-2017-7478 SUSE Linux Enterprise Point of Sale 11 SP3:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP4:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP4:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172838-1/ https://www.suse.com/security/cve/CVE-2017-7478.html CVE-2017-7478 https://bugzilla.suse.com/1038709 SUSE Bug 1038709 https://bugzilla.suse.com/1038713 SUSE Bug 1038713 OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker. CVE-2017-7479 SUSE Linux Enterprise Point of Sale 11 SP3:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Point of Sale 11 SP3:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-LTSS:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP4:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server 11 SP4:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openvpn-2.0.9-143.47.3.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:openvpn-auth-pam-plugin-2.0.9-143.47.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2017/suse-su-20172838-1/ https://www.suse.com/security/cve/CVE-2017-7479.html CVE-2017-7479 https://bugzilla.suse.com/1038711 SUSE Bug 1038711 https://bugzilla.suse.com/1038713 SUSE Bug 1038713