{"id":99986,"date":"2021-04-22T16:23:45","date_gmt":"2021-04-22T14:23:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti"},"modified":"2021-04-22T16:23:45","modified_gmt":"2021-04-22T14:23:45","slug":"obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti","title":{"rendered":"Aktualizace OpenVPN 2.5.2 a 2.4.11 s odstran\u011bn\u00edm zranitelnosti","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byly p\u0159ipraveny opravy pro OpenVPN 2.5.2 a 2.4.11, bal\u00ed\u010dek pro vytv\u00e1\u0159en\u00ed virtu\u00e1ln\u00edch priv\u00e1tn\u00edch s\u00edt\u00ed, kter\u00fd umo\u017e\u0148uje z\u0159\u00eddit \u0161ifrovan\u00e9 spojen\u00ed mezi dv\u011bma klientsk\u00fdmi po\u010d\u00edta\u010di nebo zajistit provoz centralizovan\u00e9ho VPN serveru pro sou\u010dasn\u00fd provoz n\u011bkolika klient\u016f. K\u00f3d OpenVPN je distribuov\u00e1n pod licenc\u00ed GPLv2, hotov\u00e9 bin\u00e1rn\u00ed bal\u00ed\u010dky jsou vytv\u00e1\u0159eny pro Debian, Ubuntu, CentOS, RHEL a Windows. <\/p>\n

V nov\u00fdch verz\u00edch byla odstran\u011bna zranitelnost (CVE-2020-15078), kter\u00e1 umo\u017e\u0148uje vzd\u00e1len\u00e9mu \u00fato\u010dn\u00edkovi obej\u00edt autentizaci a omezen\u00ed p\u0159\u00edstupu k organizaci \u00faniku dat o VPN nastaven\u00ed. Probl\u00e9m se projevuje pouze na serverech, kde je nastavena pou\u017eit\u00ed odlo\u017een\u00e9 autentizace (deferred_auth). \u00dato\u010dn\u00edk m\u016f\u017ee za ur\u010dit\u00fdch okolnost\u00ed donutit server vr\u00e1tit zpr\u00e1vu PUSH_REPLY s daty o nastaven\u00ed VPN<\/a> P\u0159ed odesl\u00e1n\u00edm zpr\u00e1vy AUTH_FAILED. V kombinaci s pou\u017eit\u00edm parametru «—auth-gen-token» nebo s aplikac\u00ed vlastn\u00ed autentifika\u010dn\u00ed sch\u00e9matu u\u017eivatele na z\u00e1klad\u011b token\u016f, m\u016f\u017ee tato zranitelnost v\u00e9st k z\u00edsk\u00e1n\u00ed p\u0159\u00edstupu k VPN s pou\u017eit\u00edm nefunk\u010dn\u00edho \u00fa\u010dtu. <\/p>\n

Z nezabezpe\u010den\u00fdch zm\u011bn je zaznamen\u00e1no roz\u0161\u00ed\u0159en\u00ed v\u00fdstupu informac\u00ed o TLS \u0161ifr\u00e1ch, dohodnut\u00fdch pro pou\u017eit\u00ed klientem a serverem<\/a>. Mezi nimi byly p\u0159id\u00e1ny spr\u00e1vn\u00e9 informace o podpo\u0159e TLS 1.3 a EC certifik\u00e1t\u016f. Krom\u011b toho je absence CRL souboru se seznamem odvolan\u00fdch certifik\u00e1t\u016f p\u0159i spu\u0161t\u011bn\u00ed OpenVPN nyn\u00ed vykl\u00e1d\u00e1na jako chyba, kter\u00e1 vede k ukon\u010den\u00ed \u010dinnosti.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 OpenVPN 2.5.2 \u0438 2.4.11, \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041a\u043e\u0434 OpenVPN \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2, \u0433\u043e\u0442\u043e\u0432\u044b\u0435 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f Debian, Ubuntu, CentOS, RHEL \u0438 Windows. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-15078), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99986","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aktualizace OpenVPN 2.5.2 a 2.4.11 s odstran\u011bn\u00edm zranitelnosti | ProHoster","description":"Byly p\u0159ipraveny opravy pro OpenVPN 2.5.2 a 2.4.11, bal\u00ed\u010dek pro vytv\u00e1\u0159en\u00ed virtu\u00e1ln\u00edch priv\u00e1tn\u00edch s\u00edt\u00ed, kter\u00fd umo\u017e\u0148uje z\u0159\u00eddit \u0161ifrovan\u00e9 spojen\u00ed mezi dv\u011bma klientsk\u00fdmi po\u010d\u00edta\u010di nebo zajistit provoz.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 OpenVPN 2.5.2 \u0438 2.4.11 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 OpenVPN 2.5.2 \u0438 2.4.11, \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-22T14:23:45+00:00","article:modified_time":"2021-04-22T14:23:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99986","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-22 14:28:16","updated":"2026-02-09 21:46:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99986","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=99986"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99986\/revisions"}],"predecessor-version":[{"id":160287,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99986\/revisions\/160287"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=99986"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=99986"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=99986"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}