HI Bernhard, On Sun, Jun 25, 2017 at 07:42:34PM +0200, Bernhard Schmidt wrote: > On Wed, Jun 21, 2017 at 09:56:14PM +0200, Salvatore Bonaccorso wrote: > > Hi, > > > Source: openvpn > > Version: 2.3.4-1 > > Severity: grave > > Tags: security upstream > > > > Hi, > > > > the following vulnerabilities were published for openvpn. > > In light of the recent RFA bug on OpenVPN, has there any work been done > on the Jessie version yet?
Yes, Alberto has proposed debdiffs for both stretch-security and jessie-security to the security team, and we gave some feedback. With that fixed asked him then to upload. So it's in the works and a DSA will be released when the packages are built. Regards, Salvatore