mirror of
https://github.com/openwrt/packages.git
synced 2025-08-02 00:46:22 +00:00
74a66189f1
Security fixes: CVE-2025-2704: fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2 Security scope: OpenVPN servers between 2.6.1 and 2.6.13 using --tls-crypt-v2 can be made to abort with an ASSERT() message by sending a particular combination of authenticated and malformed packets. No crypto integrity is violated, no data is leaked, and no remote code execution is possible. This bug does not affect OpenVPN clients. For details refer to https://github.com/OpenVPN/openvpn/blob/v2.6.14/Changes.rst Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
12 lines
437 B
Diff
12 lines
437 B
Diff
--- a/src/openvpn/ssl_mbedtls.c
|
|
+++ b/src/openvpn/ssl_mbedtls.c
|
|
@@ -1616,7 +1616,7 @@ const char *
|
|
get_ssl_library_version(void)
|
|
{
|
|
static char mbedtls_version[30];
|
|
- unsigned int pv = mbedtls_version_get_number();
|
|
+ unsigned int pv = MBEDTLS_VERSION_NUMBER;
|
|
snprintf(mbedtls_version, sizeof(mbedtls_version), "mbed TLS %d.%d.%d",
|
|
(pv>>24)&0xff, (pv>>16)&0xff, (pv>>8)&0xff );
|
|
return mbedtls_version;
|