[USN-6850-1] OpenVPN vulnerability

-----BEGIN PGP SIGNATURE-----
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=Hvnv
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6850-1
June 26, 2024

openvpn vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

OpenVPN could allow unintended access to network services.

Software Description:
- openvpn: virtual private network software

Details:

It was discovered that OpenVPN incorrectly handled certain configurations
with multiple authentication plugins. A remote attacker could possibly use
this issue to bypass authentication using incomplete credentials.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
openvpn 2.3.10-1ubuntu2.2+esm1
Available with Ubuntu Pro

Ubuntu 14.04 LTS
openvpn 2.3.2-7ubuntu3.2+esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6850-1
CVE-2022-0547