Skip to content

mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522)

Steffan Karger openvpn-devel 1 version In review

Get series with b4
b4 am [email protected]...

Versions newest first

  1. v1 Latest5 patches 5 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522)Changes.rst src/openvpn/ssl_verify_mbedtls.c+9 -11 reply
2/5mbedtls: require C-string compatible types for --x509-username-fieldsrc/openvpn/ssl_verify_mbedtls.c+8 -01 reply
3/5Fix remote-triggerable memory leaks (CVE-2017-7521)Changes.rst src/openvpn/ssl_verify_openssl.c+9 -51 reply
4/5Restrict --x509-alt-username extension typesChanges.rst doc/openvpn.8 src/openvpn/options.c +2 more+33 -31 reply
5/5Fix potential double-free in --x509-alt-username (CVE-2017-7521)Changes.rst src/openvpn/ssl_verify_openssl.c+11 -11 reply

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread