Addressing CVE-2023-46850 in pfSense V2.7.0
-
Is there a way to update my OpenVPN server in pfSense 2.7.0 to get rid of CVE-2023-46850?
I don't see any update for OpenVPN package and i'm currently using pfSense 2.7.0
-
@luquinhasdainfra Have you looked at 2.7.1?
-
@SteveITS I just seen it, it's really nice to know that openvpn is up to date on the latest version of pfSense,
But, i'm a bit afraid to update my system and lose the stability that i have nowdays. I'm looking for a way to update just my openvpn package,
Already tried "pkg-static upgrade openvpn" but it just broke my lab with the following error: "shared object "libssl.so.30" not found required by openvpn". I think that is because of the missing update of OpenSSL to version 3.0.12
-
@luquinhasdainfra said in Addressing CVE-2023-46850 in pfSense V2.7.0:
But, i'm a bit afraid
Looks like it. Now you have to decide what is frighten you more...
-
@Bob-Dig lol i just update the production firewall minutes ago, it was smooth and everything is working!
OpenVPN is in version 2.6.7, so i guess it is fine.
-
@luquinhasdainfra yes you cannot upgrade packages for a later version. See my sig.
