![]() Security fixes: CVE-2025-2704: fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2 Security scope: OpenVPN servers between 2.6.1 and 2.6.13 using --tls-crypt-v2 can be made to abort with an ASSERT() message by sending a particular combination of authenticated and malformed packets. No crypto integrity is violated, no data is leaked, and no remote code execution is possible. This bug does not affect OpenVPN clients. For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.14/Changes.rst Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com> |
||
---|---|---|
.. | ||
files | ||
patches | ||
Config-mbedtls.in | ||
Config-openssl.in | ||
Config-wolfssl.in | ||
Makefile | ||
test.sh |