id summary reporter owner description type status priority milestone component version severity resolution keywords cc 419 Vulnerability in bundled LZO compression code hanno Samuli Seppänen "It has been reported that the compression code for the LZO algorithm has an integer overflow: http://blog.securitymouse.com/2014/06/raising-lazarus-20-year-old-bug-that.html Amongst many other software projects OpenVPN bundles the LZO code, so it is probably affected." Bug / Defect closed major release 2.3.6 Generic / unclassified OpenVPN 2.3.4 (Community Ed) Not set (select this one, unless your'e a OpenVPN developer) fixed