MGASA-2021-0302

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0302.html

Import Source

https://advisories.mageia.org/MGASA-2021-0302.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2021-0302

Related

CVE-2020-15078

Published

2021-06-29T17:31:40Z

Modified

2021-06-29T16:16:32Z

Summary

Updated openvpn packages fix a security vulnerability

Details

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks (CVE-2020-15078).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:7 / openvpn

Package

Name: openvpn
Purl: pkg:rpm/mageia/openvpn?distro=mageia-7

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.9-1.1.mga7

Ecosystem specific

{
    "section": "core"
}

Mageia:8 / openvpn

Package

Name: openvpn
Purl: pkg:rpm/mageia/openvpn?distro=mageia-8

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.5.0-2.1.mga8

Ecosystem specific

{
    "section": "core"
}