Advisories » MGASA-2014-0560

Updated plasma-nm packages add openvpn certificate verification

Publication date: 31 Dec 2014
Modification date: 31 Dec 2014
Type: security
Affected Mageia releases : 4

Description

Updated plasma-applet-nm packages add OpenVPN option for server certificate 
verification

Plasma-nm does not tell OpenVPN to perform server certificate verification. 
Consequently, anyone with the preshared key is able to perform a MITM attack by 
impersonating the server.

This update add option to the OpenVPN plugin for server certificate verification.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14812
• https://bugs.kde.org/show_bug.cgi?id=341069
• http://lwn.net/Vulnerabilities/626419
• https://lists.fedoraproject.org/pipermail/package-announce/2014-December/146024.html

SRPMS

4/core

• plasma-nm-0.9.3.2-1.1.mga4