Updated openvpn packages fix security vulnerability

🗓️ 30 Mar 2022 17:06:56Reported by Gentoo FoundationType

Updated openvpn packages fix security vulnerability. Potential authentication by-pass with multiple deferred authentication plug-ins

Reporter	Title	Published	Views	Family All 84
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and VPN module have multiple vulnerabilities (CVE-2021-22060, CVE-2022-22950, CVE-2022-0547, CVE-2022-0778, CVE-2022-22965)	6 Jun 202218:27	–	ibm
FreeBSD	openvpn -- Potential authentication by-pass with multiple deferred authentication plug-ins	10 Mar 202200:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 9 package openvpn version 2.5.6-alt1	28 Sep 202200:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package openvpn version 2.5.6-alt1	24 May 202200:00	–	altlinux
Amazon	Low: openvpn	5 Apr 202300:00	–	amazon
Tenable Nessus	Amazon Linux AMI : openvpn (ALAS-2023-1719)	6 Apr 202300:00	–	nessus
Tenable Nessus	Debian DLA-2992-1 : openvpn - LTS security update	3 May 202200:00	–	nessus
Tenable Nessus	Fedora 35 : openvpn (2022-a9bd17092d)	17 Mar 202200:00	–	nessus
Tenable Nessus	FreeBSD : openvpn -- Potential authentication by-pass with multiple deferred authentication plug-ins (45a72180-a640-11ec-a08b-85298243e224)	17 Mar 202200:00	–	nessus
Tenable Nessus	GLSA-202409-08 : OpenVPN: Multiple Vulnerabilities	22 Sep 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	8	any	openvpn	2.5.0-2.2	openvpn-2.5.0-2.2.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/SPPNX2WVJ47VJUXDLHQ2RAW77YRH6WIP/
community	www.community.openvpn.net/openvpn/wiki/CVE-2022-0547
github	www.github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst

30 Mar 2022 17:06Current

2.9Low risk

Vulners AI Score2.9

CVSS 27.5

CVSS 3.19.8

EPSS0.03519

SSVC