CVE-2016-10229: Linux kernel, UDP and use of MSG_PEEK

OpenVPN does not make use of the MSG_PEEK feature when processing packets from a remote system, and therefore OpenVPN is not impacted by this bug.

References

• Security Focus BID 97397
• Linux Kernel Commit

Distribution notes

• Red Hat Enterprise Linux: Solution 3001781, Bugzilla CVE-2016-10229
• SUSE Enterprise Linux: SUSE Security CVE-2016-10229
• Debian: Debian Security Tracker CVE-2016-10229
• Ubuntu: Ubuntu CVE Tracker
• Arch: Arch Security CVE-2016-10229
• Android: Android Security Bulletin April 2017