Bug #6473: OpenVPN Client Export package - depends on vulnerable p7zip version (CVE-2016-2334, CVE-2016-2335) - pfSense Packages - pfSense bugtracker

Actions

Bug #6473

closed

Added by Kill Bill almost 8 years ago. Updated over 7 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Category:

OpenVPN Client Export

Target version:

Start date:

06/09/2016

Due date:

% Done:

Estimated time:

Plus Target Version:

Affected Version:

All

Affected Plus Version:

Affected Architecture:

All

Description

This depends on p7zip version vulnerable to heap-buffer-overflow (CVE-2016-2334) and out-of-bounds read (CVE-2016-2335) vulnerabilities; see http://blog.talosintel.com/2016/05/multiple-7-zip-vulnerabilities.html

OpenBSD patches for 15.14: http://marc.info/?l=openbsd-ports&m=146405545908474&w=2 (and this needs to go to FreeBSD p7zip port as well, cannot even see a bug open there.)

Actions

Also available in: Atom PDF