d7e98bd7c5
This is primarily a maintenance release with bugfixes and improvements. This release also fixes a security issue (CVE-2020-11810) which allows disrupting service of a freshly connected client that has not yet negotiated session keys. The vulnerability cannot be used to inject or steal VPN traffic. Release announcement: https://openvpn.net/community-downloads/#heading-13812 Full list of changes: https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24#OpenVPN2.4.9 Signed-off-by: Magnus Kroken <mkroken@gmail.com>
12 lines
412 B
Diff
12 lines
412 B
Diff
--- a/src/openvpn/ssl_mbedtls.c
|
|
+++ b/src/openvpn/ssl_mbedtls.c
|
|
@@ -1415,7 +1415,7 @@ const char *
|
|
get_ssl_library_version(void)
|
|
{
|
|
static char mbedtls_version[30];
|
|
- unsigned int pv = mbedtls_version_get_number();
|
|
+ unsigned int pv = MBEDTLS_VERSION_NUMBER;
|
|
sprintf( mbedtls_version, "mbed TLS %d.%d.%d",
|
|
(pv>>24)&0xff, (pv>>16)&0xff, (pv>>8)&0xff );
|
|
return mbedtls_version;
|