diff options
| author | Jo-Philipp Wich <jo@mein.io> | 2017-05-12 11:48:58 +0200 |
|---|---|---|
| committer | Jo-Philipp Wich <jo@mein.io> | 2017-05-12 11:54:48 +0200 |
| commit | e66f17ac1e9579cf08448c439a770dcd1d00d080 (patch) | |
| tree | d818cbd0cf7424b9d5a76ea5ee2f7aeff8e2cfc2 /package/network/services/openvpn/Config-mbedtls.in | |
| parent | 6704410b158b47aecf507971ad2ee5e3db840e3a (diff) | |
| download | upstream-e66f17ac1e9579cf08448c439a770dcd1d00d080.tar.gz upstream-e66f17ac1e9579cf08448c439a770dcd1d00d080.tar.bz2 upstream-e66f17ac1e9579cf08448c439a770dcd1d00d080.zip | |
openvpn: update to v2.4.2
Update to version 2.4.2 in order to address two potential Denial-of-Service
vectors in OpenVPN.
CVE-2017-7478 - Don't assert out on receiving too-large control packets
CVE-2017-7479 - Drop packets instead of assert out if packet id rolls over
Ref: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.2
Ref: https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'package/network/services/openvpn/Config-mbedtls.in')
0 files changed, 0 insertions, 0 deletions