Sakin OpenVPN 2.5.6 da 2.4.12 tare da gyara rauni

An shirya sakin gyaran gyare-gyare na OpenVPN 2.5.6 da 2.4.12, kunshin don ƙirƙirar cibiyoyin sadarwa masu zaman kansu waɗanda ke ba ku damar tsara haɗin ɓoye tsakanin injunan abokin ciniki guda biyu ko samar da sabar VPN ta tsakiya don aiki tare na abokan ciniki da yawa. An rarraba lambar OpenVPN a ƙarƙashin lasisin GPLv2, an ƙirƙiri fakitin binary shirye-shirye don Debian, Ubuntu, CentOS, RHEL da Windows.

Sabbin juzu'ai sun kawar da raunin da zai iya yuwuwar ƙetare tantancewa ta hanyar yin amfani da plugins na waje waɗanda ke goyan bayan yanayin tabbatarwa da aka jinkirta (deferred_auth). Matsalar tana faruwa lokacin da plugins da yawa ke aika da jinkirin tantancewa, wanda ke ba mai amfani da waje damar samun dama bisa ingantattun takaddun shaida. Kamar na OpenVPN 2.5.6 da 2.4.12, ƙoƙarin amfani da jinkirin tabbatarwa ta plugins da yawa zai haifar da kuskure.

Sauran canje-canje sun haɗa da haɗa sabon samfurin plugin-plugin/defer/multi-auth.c, wanda zai iya zama da amfani don tsara gwaji na lokaci guda na amfani da plugins na tabbatarwa daban-daban don ƙara guje wa lahani kama da wanda aka tattauna a sama. A kan dandalin Linux, zaɓin “-mtu-disc maybe|e” yana aiki. Kafaffen ƙwanƙwasa ƙwaƙwalwar ajiya a cikin hanyoyin ƙara hanyoyi.

source: budenet.ru

Add a comment