Advisories ยป MGASA-2014-0560

Updated plasma-nm packages add openvpn certificate verification

Publication date: 31 Dec 2014
Modification date: 31 Dec 2014
Type: security
Affected Mageia releases : 4

Description

Updated plasma-applet-nm packages add OpenVPN option for server certificate 
verification

Plasma-nm does not tell OpenVPN to perform server certificate verification. 
Consequently, anyone with the preshared key is able to perform a MITM attack by 
impersonating the server.

This update add option to the OpenVPN plugin for server certificate verification.
                

References

SRPMS

4/core