36d3edc435
The OpenVPN community project team is proud to release OpenVPN 2.5.2. It fixes two related security vulnerabilities (CVE-2020-15078) which under very specific circumstances allow tricking a server using delayed authentication (plugin or management) into returning a PUSH_REPLY before the AUTH_FAILED message, which can possibly be used to gather information about a VPN setup. In combination with “–auth-gen-token” or a user-specific token auth solution it can be possible to get access to a VPN with an otherwise-invalid account. OpenVPN 2.5.2 also includes other bug fixes and improvements. Updated OpenSSL and OpenVPN GUI are included in Windows installers.
8 lines
557 B
Text
8 lines
557 B
Text
$NetBSD: distinfo,v 1.50 2021/04/22 13:53:15 adam Exp $
|
|
|
|
SHA1 (openvpn-2.5.2.tar.xz) = 95953448917005845e8d3586f93cd5291a0730b6
|
|
RMD160 (openvpn-2.5.2.tar.xz) = 4f35090c6595b5ac0afc753e7a85aead43f5ca9a
|
|
SHA512 (openvpn-2.5.2.tar.xz) = ae2cac00ae4b9e06e7e70b268ed47d36bbb45409650175e507d5bfa12b0a4f24bccc64f2494d1563f9269c8076d0f753a492f01ea33ce376ba00b7cdcb5c7bd0
|
|
Size (openvpn-2.5.2.tar.xz) = 1134644 bytes
|
|
SHA1 (patch-configure) = 3f53e958ad96b81287d959363ec15acf37f50b31
|
|
SHA1 (patch-src_compat_compat-basename.c) = 45a58ef2e05f6e0265f229da8540760e60e65143
|