Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 786423 - net-vpn/openvpn 2.4.9 and 2.5.1 affected by security bug
Summary: net-vpn/openvpn 2.4.9 and 2.5.1 affected by security bug
Status: RESOLVED DUPLICATE of bug 785115
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal major (vote)
Assignee: Gentoo Security
URL: https://community.openvpn.net/openvpn...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-04-28 12:28 UTC by Antonio Quartulli
Modified: 2021-04-28 12:30 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Antonio Quartulli 2021-04-28 12:28:22 UTC
As explained in the reported URL, there is a CVE for a bug found in the latest release of OpenVPN. Both 2.4.x and 2.5.x series are affected.
The bug is fixed in 2.4.11 and 2.5.2.

CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15078

It would be nice to bump the version in portage to allow users to installed the fixed version.

Reproducible: Always
Comment 1 Ionen Wolkens gentoo-dev 2021-04-28 12:30:47 UTC

*** This bug has been marked as a duplicate of bug 785115 ***