Re: Critical OpenVPN Zero-Day Flaws Affecting Millions of Endpoints Across the Globe
Turritopsis Dohrnii Teo En Ming via Openvpn-users <[email protected]> Mon, 17 Jun 2024 15:00:50 +0000
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <7DwhCzZlpdyGwz_0e_PdiwX_oqH8mGxctLEsUt9eqwiops4q14EX00Qfe5neNaM1_U5jq8VSZSCywqKFQspYLPLjnGpL_RcX3Sap3gei4q8=@protonmail.com> |
Dear Mikhail, Noted with thanks. Mr. Turritopsis Dohrnii Teo En Ming Targeted Individual in Singapore On Thursday, May 16th, 2024 at 10:05 PM, M Mikky <[email protected]> wrote: >> Article: Critical OpenVPN Zero-Day Flaws Affecting Millions of Endpoints Across the Globe > >> Link: https://cybersecuritynews.com/openvpn-zero-day-flaws/ > > What the journalist refers to in this URL (to https://www.blackhat.com/us-24/briefings/schedule/#ovpnx--zero-days-leading-to-rce-lpe-and-kce-via- byovd-affecting-millions-of-openvpn-endpoints-across-the-globe-38900) is an indication of a future Microsoft's vulnerability report for OpenVPN. It looks primarily like another attempt to combat the globally used OpenVPN, since Microsoft has its own relatively little-used VPN product. > > The list of operating systems (in the original message from Microsoft) for which this danger may occur does not include Linux. > So switch to Linux - it’s already available on smartphones :-) > > In general, we must keep in mind that any modern processor, whether used in a PC or in servers, already gives rise to the possibility of security violations due to its hardware, and after correcting some problems, others are discovered. > > So if these problems were found in OpenVPN, they will be fixed here faster. > > Mikhail > > On Wed, May 15, 2024 at 6:15 PM Turritopsis Dohrnii Teo En Ming via Openvpn-users <[email protected]> wrote: > >> On Monday, May 13th, 2024 at 9:38 PM, Jakob Curdes <[email protected]> wrote: >> >>> Hi, >>> >>> these vulnerabilities are already fixed in the current versions since >>> March 2024, so if you keep your software up to date, there is no threat. >>> Also they are limited to Windws environments and not easy to exploit. >>> See: https://openvpn.net/security-advisories/ >>> >>> So the subject of your mail seems at least a bit exaggerated. >>> >>> Regards, JC >> >> Dear JC, >> >> Noted with thanks. >> >> Regards, >> >> Mr. Turritopsis Dohrnii Teo En Ming >> Targeted Individual in Singapore >> >> _______________________________________________ >> Openvpn-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/openvpn-users _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users