openvpn 보안 업데이트
업데이트 : 2017.06.24
이름 : openvpn-5:2.4.3-1.an2
벤더 : AnNyung Packaging Team
설명 :
OpenVPN is a robust and highly flexible tunneling application that uses all
of the encryption, authentication, and certification features of the
OpenSSL library to securely tunnel IP networks over a single UDP or TCP
port. It can use the Marcus Franz Xaver Johannes Oberhumer's LZO library
for compression.
변경사항
- update 2.4.3
- security issues
. CVE-2017-7478 Don't assert out on receiving too-large control packets
. CVE-2017-7479 Drop packets instead of assert out if packet id rolls over
. CVE-2017-7522 mbedtls: fix --x509-track post-authentication remote DoS
. CVE-2017-7521 Fix remote-triggerable memory leaks
. CVE-2017-7521 Fix potential double-free in --x509-alt-username
업데이트 패키지
SRPMS:
. openvpn-2.4.3-1.an2.src.rpm
x86_64:
. openvpn-2.4.3-1.an2.x86_64.rpm
i686:
. openvpn-2.4.3-1.an2.i686.rpm
|