Bude sabuntawar VPN 2.4.9

An kafa gyara sakin fakiti don ƙirƙirar cibiyoyin sadarwa masu zaman kansu Buɗe VPN 2.4.9. A cikin sabon sigar shafe rauni (CVE-2020-11810) wanda ke ba da damar canja wurin zaman abokin ciniki zuwa sabon adireshin IP wanda ba a ba da izini a baya ba. Matsalar za a iya amfani da su katsewa sabon abokin ciniki da aka haɗa a matakin lokacin da an riga an kafa peer-id, amma tattaunawar maɓallan zaman ba a kammala ba (abokin ciniki ɗaya na iya dakatar da zaman sauran abokan ciniki).

Sauran canje-canje sun haɗa da:

  • A kan dandamali na Windows, an ba da izinin amfani da igiyoyin bincike na unicode a cikin zaɓin "-cryptoapicert";
  • Yana tabbatar da cewa an shigar da takaddun takaddun da suka ƙare a cikin shagon takaddun shaida na Windows;
  • Matsalar rashin iya loda CRL da yawa (Jerin soke Shaida) da ke cikin fayil ɗaya lokacin amfani da zaɓin "--crl-verify" akan tsarin tare da OpenSSL an warware;
  • Lokacin amfani da zaɓin "-auth-user-pass file", idan akwai sunan mai amfani kawai a cikin fayil ɗin, don neman kalmar sirri, ana buƙatar dubawa don sarrafa takaddun shaida (neman kalmar sirri ta amfani da OpenVPN ta hanzari a cikin na'ura wasan bidiyo). ba zai yiwu ba;
  • An canza odar duba ayyukan hulɗar mai amfani (a cikin Windows, an fara bincika wurin daidaitawa, sannan a aika buƙatu zuwa mai sarrafa yanki);
  • Kafaffen matsaloli tare da ginawa akan dandalin FreeBSD lokacin amfani da tutar "-enable-async-push".

source: budenet.ru

Add a comment