[PATCH applied] Re: openvpnserv: harden CheckConfigPath() a bit more

Gert Doering <[email protected]>
Newsgroups gmane.network.openvpn.devel
Message-ID <[email protected]>
Path validation is hard...  thanks for taking this on, and fixing yet
another round of possible angles of attack.

Your patch has been applied to the master and release/2.7 branch.

The 2.6 codebase is sufficiently different here (and already fixed).

commit 588af513aac1d2d774fd3fde1716384e3501a5a1 (master)
commit f6621b1316970866cff9c711217b0fce5fe41d16 (release/2.7)
Author: Heiko Hund
Date:   Mon Aug 31 20:47:04 2026 +0200

     openvpnserv: harden CheckConfigPath() a bit more

     Signed-off-by: Heiko Hund <[email protected]>
     Acked-by: Razvan Cojocaru <[email protected]>
     Acked-by: Arne Schwabe <[email protected]>
     Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1886
     Message-Id: <[email protected]>
     URL: https://www.mail-archive.com/[email protected]/msg38854.html
     Signed-off-by: Gert Doering <[email protected]>


--
kind regards,

Gert Doering
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.