Oval Definition:oval:org.opensuse.security:def:111385
Revision Date:2021-05-15Version:1
Title:Security update for openvpn (Moderate)
Description:

This update for openvpn fixes the following issues:

- CVE-2020-15078: Fixed authentication bypass with deferred authentication (bsc#1185279). - CVE-2020-11810: Fixed race condition between allocating peer-id and initializing data channel key (bsc#1169925). - CVE-2018-7544: Fixed cross-protocol scripting issue that was discovered in the management interface (bsc#1085803).

This update was imported from the SUSE:SLE-15:Update update project.
Family:unixClass:patch
Status:Reference(s):1085803
1169925
1185279
CVE-2018-7544
CVE-2020-11810
CVE-2020-15078
openSUSE-SU-2021:0734-1
Platform(s):openSUSE Leap 15.2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • openvpn-2.4.3-lp152.6.3.1 is installed
  • OR openvpn-auth-pam-plugin-2.4.3-lp152.6.3.1 is installed
  • OR openvpn-devel-2.4.3-lp152.6.3.1 is installed
  • OR openvpn-down-root-plugin-2.4.3-lp152.6.3.1 is installed
  • BACK