tocsin

Alpine/openvpn: high 8.1

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a de

Action: Upgrade openvpn to 2.7.5-r0 or later.

Affected

introducedfixedlast affected
2.6.02.7.5-r0-

Fixed versions

2.7.5-r0

Sources

published · modified · JSON