Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-84790: When using the OpenSSL library, we escaped embedded null-bytes in a certificate's subject in x509_get_subject(), but in extract_x509_field_ssl(), we copied any null-bytes that are contained in the field value. When using the option --verify-x509-name, this could lead to an incorrect name being accepted. For example, the common name "admin\0impersonator" would be accepted when running with --verify-x509-name admin name. Fixed by: https://github.com/OpenVPN/openvpn/commit/cf4384eef4676a01bd3ee98fa602f7b2af8079ea (v2.7.8)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | openvpn | 0:2.6.12-1.amzn2023.0.8 |
| Amazon Linux · 2023 | openvpn-debuginfo | 0:2.6.12-1.amzn2023.0.8 |
| Amazon Linux · 2023 | openvpn-debugsource | 0:2.6.12-1.amzn2023.0.8 |
| Amazon Linux · 2023 | openvpn-devel | 0:2.6.12-1.amzn2023.0.8 |
Vulnerabilities 1
-
High 7.6
OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subj…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2026-84790.html