Lucene search

K
suseSuseSUSE-SU-2014:1605-1
HistoryDec 09, 2014 - 1:04 a.m.

Security update for OpenVPN (important)

2014-12-0901:04:46
lists.opensuse.org
8

0.006 Low

EPSS

Percentile

78.3%

This update fixes a critical denial of service vulnerability in OpenVPN:

   * CVE-2014-8104: Critical denial of service vulnerability in OpenVPN
     servers that can be triggered by authenticated attackers.

Also an incompatibility with OpenVPN and OpenSSL in FIPS mode has been
fixed. (bnc#895882)

Security Issues:

   * CVE-2014-8104
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8104">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8104</a>&gt;