Easy-RSA CVE Announcment

tincantech via Openvpn-users <[email protected]> Mon, 03 Feb 2025 18:01:41 +0000
Newsgroups gmane.network.openvpn.user
Message-ID <ZHGEXBLNIFu49MkVhxQBdpZF-vai3c4KjmCok_4X-Y-I7Cosf14spNkfdj0S9tZ1eSNU5Rh7Du7pdmz4SO9_1JIhlbUleegKh8NoXNpYR5Q=@protonmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

Easy-RSA has issued it's first CVE.

During the transitionary phase between OpenSSL v1.1.x and v3.x.x
a minor weakness was discovered when encryption the CA private key.

CVE Record:
* https://www.cve.org/CVERecord?id=CVE-2024-13454

Full details:
* https://community.openvpn.net/openvpn/wiki/CVE-2024-13454

Bug report:
* https://github.com/OpenVPN/easy-rsa/issues/1122

Thanks are given to the help and guidance received,
while confirming this CVE.

If there are further questions then please feel free to ask.

Kind Regards
Richard Bonhomme.

On behalf of OpenVPN & Easy-RSA.

Sent with Proton Mail secure email.
-----BEGIN PGP SIGNATURE-----
Version: ProtonMail
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=U8pi
-----END PGP SIGNATURE-----

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
publickey - [email protected] - 0x09BC3D44.asc (application/pgp-keys, 1.7 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=/Dea
-----END PGP PUBLIC KEY BLOCK-----
publickey - [email protected] - 0x09BC3D44.asc.sig (application/pgp-signature, 380 B) - not displayed