Re: [Openvpn-devel] Recently-disclosed LZO vulnerability and OpenVPN's use of LZO

Hi, On 29-06-14 18:09, Jonathan K. Bullard wrote: > A recent _"Lab Mouse Security research blog" entry_ > > claimed > that a bug exists in several implementations of the LZO algorithm > commonly used by OpenVPN and

Re: [Openvpn-devel] Recently-disclosed LZO vulnerability and OpenVPN's use of LZO

Hi, On Sun, Jun 29, 2014 at 12:09:01PM -0400, Jonathan K. Bullard wrote: > Am I correct to assume that OpenVPN's use of LZO is restricted to much > smaller block sizes? I assume the block sizes that OpenVPN uses LZO for are > limited to the maximum packet size, which would be on the order of 1500