shield Security update for openvpn

SUSE-SLE-Module-Basesystem-15-SP3-2021-1577

This update for openvpn fixes the following issues: - CVE-2020-15078: Fixed authentication bypass with deferred authentication (bsc#1185279). - CVE-2020-11810: Fixed race condition between allocating peer-id and initializing data channel key (bsc#1169925). - CVE-2018-7544: Fixed cross-protocol scripting issue that was discovered in the management interface (bsc#1085803).

• Release Date
  May 12 2021
• References
  Bugzilla: 1185279, 1169925, 1085803
  CVEs: CVE-2020-15078, CVE-2018-7544, CVE-2020-11810
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.3 aarch64

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.4.3-5.7.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.4.3-5.7.1 lock rpm

  openvpn-devel
  OpenVPN plugin header

  2.4.3-5.7.1 lock rpm

Basesystem Module 15.3 ppc64le

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.4.3-5.7.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.4.3-5.7.1 lock rpm

  openvpn-devel
  OpenVPN plugin header

  2.4.3-5.7.1 lock rpm

Basesystem Module 15.3 s390x

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.4.3-5.7.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.4.3-5.7.1 lock rpm

  openvpn-devel
  OpenVPN plugin header

  2.4.3-5.7.1 lock rpm

Basesystem Module 15.3 x86_64

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.4.3-5.7.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.4.3-5.7.1 lock rpm

  openvpn-devel
  OpenVPN plugin header

  2.4.3-5.7.1 lock rpm