{"id":103554,"date":"2022-03-17T09:36:44","date_gmt":"2022-03-17T07:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openvpn-2-5-6-i-2-4-12-s-ustraneniem-uyazvimosti"},"modified":"2022-03-17T09:36:44","modified_gmt":"2022-03-17T07:36:44","slug":"vypusk-openvpn-2-5-6-i-2-4-12-s-ustraneniem-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-openvpn-2-5-6-i-2-4-12-s-ustraneniem-uyazvimosti","title":{"rendered":"Vyd\u00e1n\u00ed OpenVPN 2.5.6 a 2.4.12 s odstran\u011bn\u00edm zranitelnosti","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byly p\u0159ipraveny opravn\u00e9 verze OpenVPN 2.5.6 a 2.4.12, bal\u00ed\u010dku pro vytv\u00e1\u0159en\u00ed virtu\u00e1ln\u00edch priv\u00e1tn\u00edch s\u00edt\u00ed, kter\u00fd umo\u017e\u0148uje zajistit \u0161ifrovan\u00e9 spojen\u00ed mezi dv\u011bma klientsk\u00fdmi za\u0159\u00edzen\u00edmi nebo celkovou funkci centralizovan\u00e9ho VPN serveru pro sou\u010dasnou pr\u00e1ci n\u011bkolika klient\u016f. K\u00f3d OpenVPN je distribuov\u00e1n pod licenc\u00ed GPLv2, hotov\u00e9 bin\u00e1rn\u00ed bal\u00ed\u010dky jsou vytv\u00e1\u0159eny pro Debian, Ubuntu, CentOS, RHEL a Windows. <\/p>\n

Nov\u00e9 verze opravuj\u00ed zranitelnost, kter\u00e1 potenci\u00e1ln\u011b umo\u017e\u0148uje obej\u00edt autentizaci manipulac\u00ed s extern\u00edmi pluginy podporuj\u00edc\u00edmi re\u017eim odlo\u017een\u00e9 autentizace (deferred_auth). Probl\u00e9m nast\u00e1v\u00e1, kdy\u017e n\u011bkolik plugin\u016f pos\u00edl\u00e1 odlo\u017een\u00e9 odpov\u011bdi autentizace, co\u017e extern\u00edmu u\u017eivateli umo\u017e\u0148uje p\u0159\u00edstup na z\u00e1klad\u011b nedostate\u010dn\u011b spr\u00e1vn\u00fdch p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f. Od vyd\u00e1n\u00ed OpenVPN 2.5.6 a 2.4.12 pokusy o pou\u017eit\u00ed odlo\u017een\u00e9 autentizace n\u011bkolika pluginy vy\u00fast\u00ed v zobrazen\u00ed chyby. <\/p>\n

Mezi dal\u0161\u00ed zm\u011bny pat\u0159\u00ed zahrnut\u00ed nov\u00e9ho pluginu sample-plugin\/defer\/multi-auth.c, kter\u00fd m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00fd pro organizaci testov\u00e1n\u00ed sou\u010dasn\u00e9ho pou\u017e\u00edv\u00e1n\u00ed r\u016fzn\u00fdch autentiza\u010dn\u00edch plugin\u016f, aby se v budoucnu p\u0159ede\u0161lo zranitelnostem, jako byla ta, kter\u00e1 byla zm\u00edn\u011bna v\u00fd\u0161e. Na platform\u011b Linux byla nastavena mo\u017enost «—mtu-disc maybe|yes». Byla napravena \u00fanik pam\u011bti ve funkc\u00edch p\u0159id\u00e1v\u00e1n\u00ed tras.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 OpenVPN 2.5.6 \u0438 2.4.12, \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041a\u043e\u0434 OpenVPN \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2, \u0433\u043e\u0442\u043e\u0432\u044b\u0435 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f Debian, Ubuntu, CentOS, RHEL \u0438 Windows. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103554","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed OpenVPN 2.5.6 a 2.4.12 s opravou zranitelnosti | ProHoster","description":"Byly p\u0159ipraveny opravn\u00e9 verze OpenVPN 2.5.6 a 2.4.12, bal\u00ed\u010dku pro vytv\u00e1\u0159en\u00ed virtu\u00e1ln\u00edch priv\u00e1tn\u00edch s\u00edt\u00ed, kter\u00fd umo\u017e\u0148uje zajistit \u0161ifrovan\u00e9 spojen\u00ed mezi dv\u011bma klientsk\u00fdmi za\u0159\u00edzen\u00edmi nebo celkovou funkci.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-openvpn-2-5-6-i-2-4-12-s-ustraneniem-uyazvimosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenVPN 2.5.6 \u0438 2.4.12 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 OpenVPN 2.5.6 \u0438 2.4.12, \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-openvpn-2-5-6-i-2-4-12-s-ustraneniem-uyazvimosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-03-17T07:36:44+00:00","article:modified_time":"2022-03-17T07:36:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103554","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-03-17 07:37:26","updated":"2022-09-28 18:04:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=103554"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/103554\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=103554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=103554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=103554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}