Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2020-15078: Fixed authentication bypass with deferred authentication (bsc#1185279). - CVE-2020-11810: Fixed race condition between allocating peer-id and initializing data channel key (bsc#1169925). - CVE-2018-7544: Fixed cross-protocol scripting issue that was discovered in the management interface (bsc#1085803).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for openvpn fixes the following issues: - CVE-2020-15078: Fixed authentication bypass with deferred authentication (bsc#1185279). - CVE-2020-11810: Fixed race condition between allocating peer-id and initializing data channel key (bsc#1169925). - CVE-2018-7544: Fixed cross-protocol scripting issue that was discovered in the management interface (bsc#1085803).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1085803
- https://bugzilla.suse.com/1169925
- https://bugzilla.suse.com/1185279
- https://www.suse.com/security/cve/CVE-2018-7544
- https://www.suse.com/security/cve/CVE-2020-11810
- https://www.suse.com/security/cve/CVE-2020-15078
- https://www.suse.com/support/update/announcement/2021/suse-su-20211577-1/