• Bug#1106206: marked as done (openvpn3-client: CVE-2025-3908) (2/2)

    From Debian Bug Tracking System@1:229/2 to All on Wed May 28 14:30:01 2025
    [continued from previous message]

    oeG5CnbcGTI2skDXf8OA98gZpZVdvdqBlPTSuwz0ZkWvLII9ibWn1FpLBmx+pnLHQGKp8HFKWSjHe
    DKK2ImF0XlNbJZJ0qrNK0hPpDeQ7sKACPEdgcuB8sWrWwM8ziNjzTqS4vHjK4g3UXNaYMHqUxB4DD
    RLkWHfPQ==;
    Received: from dak by fasolo.debian.org with local (Exim 4.94.2)
    (envelope-from <[email protected]>)
    id 1uKFlv-000Yfn-Vu; Wed, 28 May 2025 12:20:39 +0000
    From: Debian FTP Masters <[email protected]>
    Reply-To: Marc Leeman <[email protected]>
    To: [email protected]
    X-DAK: dak process-upload
    X-Debian: DAK
    X-Debian-Package: openvpn3-client
    Debian: DAK
    Debian-Changes: openvpn3-client_24.1+dfsg-1_source.changes
    Debian-Source: openvpn3-client
    Debian-Version: 24.1+dfsg-1
    Debian-Architecture: source
    Debian-Suite: unstable
    Debian-Archive-Action: accept
    MIME-Version: 1.0
    Subject: Bug#1106206: fixed in openvpn3-client 24.1+dfsg-1
    Content-Type: multipart/signed; micalg="pgp-sha256";
    protocol="application/pgp-signature";
    boundary="===============3475122115379992746=="
    Message-Id: <[email protected]>
    Date: Wed, 28 May 2025 12:20:39 +0000

    --===============3475122115379992746==
    Content-Type: text/plain; charset="utf-8"
    Content-Transfer-Encoding: quoted-printable

    Source: openvpn3-client
    Source-Version: 24.1+dfsg-1
    Done: Marc Leeman <[email protected]>

    We believe that the bug you reported is fixed in the latest version of openvpn3-client, which is due to be installed in the Debian FTP archive.

    A summary of the changes between this version and the previous one is
    attached.

    Thank you for reporting the bug, which will now be closed. If you
    have further comments please address them to [email protected],
    and the maintainer will reopen the bug report if appropriate.

    Debian distribution maintenance software
    pp.
    Marc Leeman <[email protected]> (supplier of updated openvpn3-client package)

    (This message was generated automatically at their request; if you
    believe that there is a problem with it please contact the archive administrators by mailing [email protected])


    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Tue, 20 May 2025 10:36:39 +0200
    Source: openvpn3-client
    Architecture: source
    Version: 24.1+dfsg-1
    Distribution: unstable
    Urgency: medium
    Maintainer: Marc Leeman <[email protected]>
    Changed-By: Marc Leeman <[email protected]>
    Closes: 1106206
    Changes:
    openvpn3-client (24.1+dfsg-1) unstable; urgency=medium
    .
    [ Marc Leeman ]
    * d/gbp.conf: rename to [import-orig]
    * d/patches: remove access to git with meson
    * d/control: bump Standards-Version to 4.7.2
    * d/copyright: remove unused BSL-1.0
    * d/watch: allow for point releases
    * New upstream version 24.1+dfsg
    * d/patches: refresh
    * Addresses CVE-2025-3908 (Closes: #1106206)
    .
    [ Fabio Pedretti ]
    * d/rules: don't force -Dopenvpn3_core_version=3
    Checksums-Sha1:
    dee9092146276ba430bf7cd01fe5f47ea5b67655 2402 openvpn3-client_24.1+dfsg-1.dsc
    0f17916b53f50d536fb2ab66d9b7cdbbb2dbcfe0 2573228 openvpn3-client_24.1+dfsg.orig.tar.xz
    bdfbaed62c2b9ffed97fd813ff8128fef6ef6455 23760 openvpn3-client_24.1+dfsg-1.debian.tar.xz
    7149322471b05f0fde9b926660415eb0e843e401 8876 openvpn3-client_24.1+dfsg-1_source.buildinfo
    Checksums-Sha256:
    1f435e5c9f13361085ffc372bf9a893892987b83c89cab12d636b7fc340e7357 2402 openvpn3-client_24.1+dfsg-1.dsc
    88be2cad8a1b2810933e5730463c2f9d59ac1adfd9b8e781c5db675471155ece 2573228 openvpn3-client_24.1+dfsg.orig.tar.xz
    19775434484fcd0da90ce0f9c492e288dd9364d9e1036280358ace372abd034c 23760 openvpn3-client_24.1+dfsg-1.debian.tar.xz
    13e91ab6bd000c9f6bc7e42a5f74ca535a14ed8eb82e075dfc37283548a55fe3 8876 openvpn3-client_24.1+dfsg-1_source.buildinfo
    Files:
    b541396391243e7d85a4d59ca142df95 2402 net optional openvpn3-client_24.1+dfsg-1.dsc
    a77e783926c36b31c1d72b5695e3faa0 2573228 net optional openvpn3-client_24.1+dfsg.orig.tar.xz
    341ac3e43ffcc3b493cfd810442c8145 23760 net optional openvpn3-client_24.1+dfsg-1.debian.tar.xz
    6f501e95c298d937c571dde75488e9fe 8876 net optional openvpn3-client_24.1+dfsg-1_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQJKBAEBCgA0FiEEgnz9dLpGgVKgQfOgempPF1mVplsFAmg2/EUWHG1hcmMubGVl bWFuQGdtYWlsLmNvbQAKCRB6ak8XWZWmW7gQD/9EYXhHCZ+V57rnWniE6cRTGqnv I9ycHzimYSWSMTmBVqaCl3fxIwnTm9fWb3/H8jWj39psjGdbsMeCis1spRU0iovx uPhC6vSUxbcKlU11icd2prh+EQaoaOaqLfse3CeI6A3CPfcGQmZrKISBNaBstuH5 /Ve1XqeHTIVvLxwsJ6k48zSIyAmI+JDyODYN6y7eHYd6c3MoY4Di+DuBPw6RfS6e X4JVKgZmIvACBFDwOFhhDEk6exk2O2+QlTPCxwyOGdY6+gfhYzYNEXVJjcnOiMDg j/4rN2sUVrWJgNLqQPpiTAnR3bK599n4SdzqgTBgT4ZwkE6VwMsZ6eaVcUMq0VQD 13bK/baIju6RtAIc5mgk2qiDGg1CRAP/c7m8koexcPhbgXJFaiZilkjxN9l9Sb2Z PUPfXEjsxHlQGvhSkjMSjXV5/3lUz533XWVtWjD30ZQXoFnpxwMINpiw5SAn945v 29bHz4VplAHE2GocTG6sjcOLXR6ko7W/IM8Fc0AF2KiOwnOoCm6WGBL32zkKt2SU aGa+Cj2XAUqSqsa2zkvkktGLLouF8n2Y4zbt8/y260NMnK93EhtggncDk4cAOj4b 7NhoUd5+SoSoGeSwCUaFFC17JGdYUNHhWBkC0a/pb1WsMSaD9QYRNZ8fdGsYuQ9p 7Ak3cQAnIrOuHhQFGg==
    =4VX3
    -----END PGP SIGNATURE-----


    --==============475122115379992746=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaDb/lwAKCRCb9qggYcy5 IZ4DAQCPyn6+2Q0d9q7Nb6BRw1DZbjGnrTE667iQva8UMD+lMgD/WpILHnJ5+PdD OEX3l2iYRTANv8SFWrFsj763a9n6wAs=PW+L
    -----END PGP SIGNATURE-----

    --==============475122115379992746==--

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)