[Openvpn-devel] [PATCH] openssl: fix overflow check for long --tls-cipher option

The length check in tls_ctx_restrict_ciphers() did not check for overflow, which could lead to a stack buffer overflow. This has no real-world impact, because --tls-cipher can only be specified by entities that are allowed to supply config settings. Since those entities can also change --script-s

Re: [Openvpn-devel] OpenVPN 2.3.16 released

On 19/05/2017 15:37, David Sommerseth wrote: > On 19/05/17 12:46, Jonathan K. Bullard wrote: >> On Fri, May 19, 2017 at 5:29 AM, Samuli Seppänen wrote: >>> >>> The OpenVPN community project team is proud to release OpenVPN 2.3.16. >>> It can be downloaded from here: >>> >>>