openSUSE-SU-2017:2892-1
Security update for openvpn
Kaynağa göre önem derecesi
Hiçbir kaynak CVSS puanı vermiyor.
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: SUSE.
Açıklama
This update for openvpn fixes the following issues: - CVE-2017-12166: Lack of bound check in read_key in old legacy key handling before using values could be used for a remote buffer overflow (bsc#1060877). This update was imported from the SUSE:SLE-12:Update update project.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 42.2 | openvpn, openvpn-auth-pam-plugin, openvpn-devel ve 1 tane daha | 2.3.8-14.1 |
| openSUSE Leap 42.3 | openvpn, openvpn-auth-pam-plugin, openvpn-devel ve 1 tane daha | 2.3.8-14.1 |
2 kaynaktaki 8 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| openSUSE Leap 42.2 | openvpn | 2.3.8-14.1 |
| openSUSE Leap 42.2 | openvpn-auth-pam-plugin | 2.3.8-14.1 |
| openSUSE Leap 42.2 | openvpn-devel | 2.3.8-14.1 |
| openSUSE Leap 42.2 | openvpn-down-root-plugin | 2.3.8-14.1 |
| openSUSE Leap 42.3 | openvpn | 2.3.8-14.1 |
| openSUSE Leap 42.3 | openvpn-auth-pam-plugin | 2.3.8-14.1 |
| openSUSE Leap 42.3 | openvpn-devel | 2.3.8-14.1 |
| openSUSE Leap 42.3 | openvpn-down-root-plugin | 2.3.8-14.1 |