Git-Url: http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-1.9.git;a=commitdiff;h=67e302a5d2f2306db555e51d24eaeb7afe19fc53
commit 67e302a5d2f2306db555e51d24eaeb7afe19fc53 Author: kikadf <[email protected]> Date: Thu Dec 4 10:33:38 2014 +0100 openvpn-2.1.3-7arcturus2-x86_64 * Fix CVE-2014-8104 diff --git a/source/network-extra/openvpn/CVE-2014-8104.patch b/source/network-extra/openvpn/CVE-2014-8104.patch new file mode 100644 index 0000000..68c3e92 --- /dev/null +++ b/source/network-extra/openvpn/CVE-2014-8104.patch @@ -0,0 +1,42 @@ +From c5590a6821e37f3b29735f55eb0c2b9c0924138c Mon Sep 17 00:00:00 2001 +From: Steffan Karger <[email protected]> +Date: Thu, 20 Nov 2014 13:43:05 +0100 +Subject: [PATCH] Drop too-short control channel packets instead of asserting + out. + +This fixes a denial-of-service vulnerability where an authenticated client +could stop the server by triggering a server-side ASSERT(). + +OpenVPN would previously ASSERT() that control channel packets have a +payload of at least 4 bytes. An authenticated client could trigger this +assert by sending a too-short control channel packet to the server. + +Thanks to Dragana Damjanovic for reporting the issue. + +This bug has been assigned CVE-2014-8104. + +Signed-off-by: Steffan Karger <[email protected]> +Acked-by: Gert Doering <[email protected]> +Message-Id: <[email protected]> +Signed-off-by: Gert Doering <[email protected]> +--- + ssl.c | 6 +++++- + 1 file changed, 5 insertions(+), 1 deletion(-) + +Index: openvpn-2.2.1/ssl.c +=================================================================== +--- openvpn-2.2.1.orig/ssl.c 2011-06-24 08:13:39.000000000 +0200 ++++ openvpn-2.2.1/ssl.c 2014-12-01 16:28:25.003615544 +0100 +@@ -3751,7 +3751,11 @@ + ALLOC_ARRAY_CLEAR_GC (options, char, TLS_OPTIONS_LEN, &gc); + + /* discard leading uint32 */ +- ASSERT (buf_advance (buf, 4)); ++ if (!buf_advance (buf, 4)) { ++ msg (D_TLS_ERRORS, "TLS ERROR: Plaintext buffer too short (%d bytes).", ++ buf->len); ++ goto error; ++ } + + /* get key method */ + key_method_flags = buf_read_u8 (buf); diff --git a/source/network-extra/openvpn/FrugalBuild b/source/network-extra/openvpn/FrugalBuild index 0e0c3c4..d4ad0c1 100644 --- a/source/network-extra/openvpn/FrugalBuild +++ b/source/network-extra/openvpn/FrugalBuild @@ -4,7 +4,7 @@ pkgname=openvpn pkgver=2.1.3 -pkgrel=7arcturus1 +pkgrel=7arcturus2 pkgdesc="A secure tunneling daemon" url="http://www.openvpn.org/"; depends=('openssl>=1.0.0' 'lzo' 'pam') @@ -18,10 +18,12 @@ _F_systemd_units=(openvpn@=) Finclude systemd # FSA fix *** -source=(${source[@]} CVE-2013-2061.patch) -sha1sums=(${sha1sums[@]} '482b91d4943f6c53d630423477bb8ff35d98f625') +source=(${source[@]} CVE-2013-2061.patch CVE-2014-8104.patch) +sha1sums=(${sha1sums[@]} '482b91d4943f6c53d630423477bb8ff35d98f625' \ + '2906c568c6a5b28094692697f0781ece3c087df3') # *********** + build() { Fbuild --sysconfdir=/etc/openvpn --prefix=/usr _______________________________________________ Frugalware-git mailing list [email protected] http://frugalware.org/mailman/listinfo/frugalware-git
