Multiple vulnerabilities have been discovered in OpenVPN, the worst of which could lead to information disclosure.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-vpn/openvpn | * | < 2.6.7 | >= 2.6.7 |
OpenVPN is a multi-platform, full-featured SSL VPN solution.
Multiple vulnerabilities have been discovered in OpenVPN. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All OpenVPN users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-vpn/openvpn-2.6.7"
A vulnerability has been found in OpenVPN, allowing attackers to bypass the authentication process.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-vpn/openvpn | * | < 2.5.2 | >= 2.5.2 |
OpenVPN is a multi-platform, full-featured SSL VPN solution.
It was discovered that OpenVPN incorrectly handled deferred authentication.
A remote attacker could bypass authentication and access control channel data and trigger further information leaks.
Configure OpenVPN server to not use deferred authentication.
All OpenVPN users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-vpn/openvpn-2.5.2"