openvpn

SHA256

Go to file

Dominique Leuenberger d318daeffa Accepting request 898085 from network:vpn

- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv5 init support, it hasn't build successfully in ages
  and is build-disabled in devel project

OBS-URL: https://build.opensuse.org/request/show/898085
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openvpn?expand=0&rev=92

2021-06-11 20:30:28 +00:00

.gitattributes

OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openvpn?expand=0&rev=1

2007-01-15 23:28:38 +00:00

.gitignore

OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/openvpn?expand=0&rev=1

2007-01-15 23:28:38 +00:00

0001-preform-deferred-authentication-in-the-background.patch

Accepting request 860796 from home:dirkmueller:branches:network:vpn

2021-01-08 08:45:09 +00:00

client-netconfig.down

Accepting request 41476 from network:vpn