- Update to version 2.3.6 fixing a denial-of-service vulnerability

where an authenticated client could stop the server by triggering
  a server-side ASSERT (bnc#907764,CVE-2014-8104).
  See ChangeLog file for a complete list of changes.

OBS-URL: https://build.opensuse.org/package/show/network:vpn/openvpn?expand=0&rev=83

openvpn-2.3.5.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d93b447b014a41ec1550c3b760871aa72d7c09f1b5c6fc1e013d3073ac29ca21
-size 1196464

openvpn-2.3.5.tar.gz.asc

@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1
-
-iEYEABECAAYFAlRP0U4ACgkQwp2X7RmNIqPAvgCgz1D9o/TrFXrXGBHcXLfrQyob
-RhYAoIx5SlqO/3oC1wSAr/a/IvCW5DQh
-=uhc/
------END PGP SIGNATURE-----

openvpn-2.3.6.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7baed2ff39c12e1a1a289ec0b46fcc49ff094ca58b8d8d5f29b36ac649ee5b26
+size 1213272

openvpn-2.3.6.tar.gz.asc

@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iEYEABECAAYFAlR8NIAACgkQwp2X7RmNIqOgMgCg4LWcWBiy+dr/Dp0COmB4a3yf
+JZUAnRiDBUUFJEk5j63sIaMMc+5Waqqk
+=DC+g
+-----END PGP SIGNATURE-----

openvpn.changes

@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Mon Dec  1 19:37:29 UTC 2014 - mt@suse.de
+
+- Update to version 2.3.6 fixing a denial-of-service vulnerability
+  where an authenticated client could stop the server by triggering
+  a server-side ASSERT (bnc#907764,CVE-2014-8104).
+  See ChangeLog file for a complete list of changes.
+
 -------------------------------------------------------------------
 Thu Oct 30 12:28:48 UTC 2014 - idonmez@suse.com
 

openvpn.spec

@@ -32,7 +32,7 @@ Url:            http://openvpn.net/
 %else
 PreReq:         %insserv_prereq %fillup_prereq
 %endif
-Version:        2.3.5
+Version:        2.3.6
 Release:        0
 Summary:        Full-featured SSL VPN solution using a TUN/TAP Interface
 License:        SUSE-GPL-2.0-with-openssl-exception and LGPL-2.1