Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0278-1

Опубликовано: 28 янв. 2025
Источник: suse-cvrf

Описание

Security update for openvpn

This update for openvpn fixes the following issues:

  • CVE-2024-5594: Fixed wrong handling of null bytes and invalid characters in control messages (bsc#1235147)

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP6
openvpn-2.6.8-150600.3.14.1
openvpn-auth-pam-plugin-2.6.8-150600.3.14.1
openvpn-dco-2.6.8-150600.3.14.1
openvpn-dco-devel-2.6.8-150600.3.14.1
openvpn-devel-2.6.8-150600.3.14.1
openSUSE Leap 15.6
openvpn-2.6.8-150600.3.14.1
openvpn-auth-pam-plugin-2.6.8-150600.3.14.1
openvpn-dco-2.6.8-150600.3.14.1
openvpn-dco-devel-2.6.8-150600.3.14.1
openvpn-devel-2.6.8-150600.3.14.1
openvpn-down-root-plugin-2.6.8-150600.3.14.1

Ссылки

Описание

OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP6:openvpn-2.6.8-150600.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:openvpn-auth-pam-plugin-2.6.8-150600.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:openvpn-dco-2.6.8-150600.3.14.1
SUSE Linux Enterprise Module for Basesystem 15 SP6:openvpn-dco-devel-2.6.8-150600.3.14.1
Ссылки