{"id":99986,"date":"2021-04-22T16:23:45","date_gmt":"2021-04-22T14:23:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti"},"modified":"2021-04-22T16:23:45","modified_gmt":"2021-04-22T14:23:45","slug":"obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti","title":{"rendered":"Aktualiz\u00e1cia OpenVPN 2.5.2 a 2.4.11 s odstr\u00e1nen\u00edm zranite\u013enosti","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Boli pripraven\u00e9 opravy OpenVPN 2.5.2 a 2.4.11, bal\u00edka na vytv\u00e1ranie virtu\u00e1lnych priv\u00e1tnych siet\u00ed, ktor\u00fd umo\u017e\u0148uje zriadi\u0165 \u0161ifrovan\u00e9 pripojenie medzi dvoma klientsk\u00fdmi zariadeniami alebo zabezpe\u010di\u0165 pr\u00e1cu centralizovan\u00e9ho VPN servera pre s\u00fa\u010dasn\u00fa pr\u00e1cu viacer\u00fdch klientov. K\u00f3d OpenVPN je \u0161\u00edren\u00fd pod licenciou GPLv2, hotov\u00e9 bin\u00e1rne bal\u00edky s\u00fa vytv\u00e1ran\u00e9 pre Debian, Ubuntu, CentOS, RHEL a Windows. <\/p>\n

V nov\u00fdch vydaniach bola odstr\u00e1nen\u00e1 zranite\u013enos\u0165 (CVE-2020-15078), ktor\u00e1 umo\u017e\u0148uje vzdialen\u00e9mu \u00fato\u010dn\u00edkovi ob\u00eds\u0165 autentifik\u00e1ciu a obmedzenia pr\u00edstupu na organiz\u00e1ciu \u00faniku \u00fadajov o nastaveniach VPN. Probl\u00e9m sa prejavuje iba na serveroch, na ktor\u00fdch je nastaven\u00e9 pou\u017e\u00edvanie odlo\u017een\u00e9ho overovania (deferred_auth). \u00dato\u010dn\u00edk za ur\u010dit\u00fdch okolnost\u00ed m\u00f4\u017ee don\u00fati\u0165 server vr\u00e1ti\u0165 spr\u00e1vu PUSH_REPLY s \u00fadajmi o nastaveniach. VPN<\/a> Pred odoslan\u00edm spr\u00e1vy AUTH_FAILED. V kombin\u00e1cii s pou\u017eit\u00edm parametra «—auth-gen-token» alebo uplatnen\u00edm vlastnej autentifika\u010dnej sch\u00e9my pou\u017e\u00edvate\u013ea zalo\u017eenej na tokenoch m\u00f4\u017ee zranite\u013enos\u0165 vies\u0165 k z\u00edskaniu pr\u00edstupu k VPN pomocou nefunk\u010dn\u00e9ho \u00fa\u010dtu. <\/p>\n

Medzi nez\u00e1visl\u00fdmi zmenami nes\u00favisiacimi s bezpe\u010dnos\u0165ou je pozoruhodn\u00e9 roz\u0161\u00edrenie v\u00fdstupu inform\u00e1ci\u00ed o TLS \u0161ifr\u00e1ch, dohodnut\u00fdch na pou\u017e\u00edvanie klientom a serverom<\/a>. V tomto pr\u00edpade boli pridan\u00e9 spr\u00e1vne inform\u00e1cie o podpore TLS 1.3 a EC certifik\u00e1tov. Okrem toho sa nedostatok s\u00faboru CRL zo zoznamu zru\u0161en\u00fdch certifik\u00e1tov pri spusten\u00ed OpenVPN teraz interpretuje ako chyba, ktor\u00e1 vedie k ukon\u010deniu pr\u00e1ce.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 OpenVPN 2.5.2 \u0438 2.4.11, \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e VPN-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041a\u043e\u0434 OpenVPN \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2, \u0433\u043e\u0442\u043e\u0432\u044b\u0435 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f Debian, Ubuntu, CentOS, RHEL \u0438 Windows. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-15078), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99986","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aktualiz\u00e1cia OpenVPN 2.5.2 a 2.4.11 s odstr\u00e1nen\u00edm zranite\u013enosti | ProHoster","description":"Boli pripraven\u00e9 opravy OpenVPN 2.5.2 a 2.4.11, bal\u00edka na vytv\u00e1ranie virtu\u00e1lnych priv\u00e1tnych siet\u00ed, ktor\u00fd umo\u017e\u0148uje zriadi\u0165 \u0161ifrovan\u00e9 pripojenie medzi dvoma klientsk\u00fdmi zariadeniami alebo zabezpe\u010di\u0165 pr\u00e1cu.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 OpenVPN 2.5.2 \u0438 2.4.11 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 OpenVPN 2.5.2 \u0438 2.4.11, \u043f\u0430\u043a\u0435\u0442\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u043c\u0430\u0448\u0438\u043d\u0430\u043c\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/obnovlenie-openvpn-2-5-2-i-2-4-11-s-ustraneniem-uyazvimosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-22T14:23:45+00:00","article:modified_time":"2021-04-22T14:23:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99986","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-22 14:28:16","updated":"2026-02-09 21:46:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99986","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=99986"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99986\/revisions"}],"predecessor-version":[{"id":160287,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99986\/revisions\/160287"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=99986"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=99986"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=99986"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}