On 12/05/17 13:59, Jonathan Wakely wrote:
On 11/05/17 16:59 +0200, David Sommerseth wrote:
>
> Hi,
>
> Just making a little noise here, as the upstream OpenVPN community have
> released v2.4.2 which fixes to critical authenticated remote DoS
> vulnerabilities.
>
>
<
http://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEnginee...
>
> (the site is being hammered right now, so patience is needed ;-))
>
> I have already sent the updates to EPEL 6, EPEL7 and F-25.
>
> Next in the pipe is F-26 and Rawhide, but that have the challenges
> around OpenSSL 1.1 vs mbedtls - and I plan to test out compat-openssl
> with compat-pkcs11-helper.
Will F24 get an update to 2.3.15?
The current 2.3.14 version seems to have the same issues as 2.4.1 in
F25 does.
(I'm not asking for an F24 update, just curious if you plan one).
To be honest, I haven't spent much time thinking of F24. I've focused
on F25 or newer. But it makes sense to at least update to 2.3.15. I'll
give that a look soonish.
--
kind regards,
David Sommerseth