Your message dated Wed, 02 Jul 2008 02:34:02 +0300
with message-id <[EMAIL PROTECTED]>
and subject line openvpn bugs in debian stable ... NOT
has caused the Debian Bug report #487660,
regarding openvpn bugs in debian stable
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
487660: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487660
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: openvpn
Version: 2.0.9-4etch1
Severity: grave
Tags: security
Justification: user security hole
In debian stable, openvpn is bugged:
dpkg -l|grep openvpn
ii openvpn 2.0.9-4etch1 Virtual Private Network daemon
apt-listbugs list openvpn
grave bugs of openvpn (2.0.9-4etch1 -> ) <done>
#483723 - /usr/sbin/openssl-vulnkey: not found (Fixed: openvpn/2.1~rc7-3)
#483020 - openssl-vulnkey hangs on connecting (Fixed: openvpn/2.1~rc7-4)
serious bugs of openvpn (2.0.9-4etch1 -> ) <done>
So I do:
apt-get update && apt-get upgrade and I see:
[...]
0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded
and
apt-get install openvpn
openvpn is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded
If already there's openvpn2.1-rc7-4 without some bugs, why the stable distro
doesn't show me any upgrades?
I prefer not install openvpn from unstable or however using a mix distro,
because this server is for production of work.
Why the new version of openvpn is not present on the stable debian reposity?
thanks :-)
psycheye
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable'), (1, 'unstable'), (1, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.22.19-vs2.2.0.7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages openvpn depends on:
ii debconf [debconf-2.0] 1.5.11etch1 Debian configuration management sy
ii libc6 2.3.6.ds1-13etch5 GNU C Library: Shared libraries
ii liblzo2-2 2.02-2 data compression library
ii libssl0.9.8 0.9.8c-4etch3 SSL shared libraries
openvpn recommends no packages.
-- debconf information:
openvpn/change_init: false
openvpn/stop2upgrade: false
openvpn/default_port:
openvpn/change_init2: false
openvpn/create_tun: false
--- End Message ---
--- Begin Message ---
Version: 2.0.9-4etch1
Did it ever occur to you that you might NOT be affected by these bugs because they are specific to
the unstable version?
Closing report, since stable's openvpn doesn't use/have openvpn-vulnkey.
--
Regards,
EddyP
=============================================
"Imagination is more important than knowledge" A.Einstein
--- End Message ---
