bitmask-vpn.git, branch 0.21.11 [bitmask-vpn] [pkg] bump debian version 2021-12-15T19:03:58+00:00 kali kaneko (leap communications) kali@leap.se 2021-12-15T19:03:58+00:00 f336f8f0946c595e6c65c0bb6c7756c19bd30909 






[bug] avoid installing in custom paths
2021-12-15T19:02:12+00:00

kali
kali@win

2021-12-15T18:45:11+00:00

e694a038c7edc146b63557425b307833b11aea57

A vulnerability in QtIFW produces improper ACLs to be set when
installing in custom locations. This can lead to privilege escalation if
a non-privileged user overwrites the openvpn binary. Thanks to
researchers at Tenable for finding and reporting this!

Impact is considered low-medium, since an installation outside of the
suggested path is needed to trigger the issue.

Privileged execution of openvpn should be abandoned in next release, in
favor of the interactive service.

A bug upstream should be filed since other projects could be affected by
this vulnerability too.

-Resolves: #569





A vulnerability in QtIFW produces improper ACLs to be set when
installing in custom locations. This can lead to privilege escalation if
a non-privileged user overwrites the openvpn binary. Thanks to
researchers at Tenable for finding and reporting this!

Impact is considered low-medium, since an installation outside of the
suggested path is needed to trigger the issue.

Privileged execution of openvpn should be abandoned in next release, in
favor of the interactive service.

A bug upstream should be filed since other projects could be affected by
this vulnerability too.

-Resolves: #569







[pkg] bump version
2021-12-14T18:30:07+00:00

kali kaneko (leap communications)
kali@leap.se

2021-12-14T17:28:00+00:00

7ab7b8cd822dc0e4548f9cf6795567f2eeef44e1












[pkg] bugfixes windows
2021-12-14T17:21:32+00:00

kali
kali@win

2021-12-14T17:18:16+00:00

5d9788388c9cf176a331d1fddc708420d88c4ce5












[docs] windows docs
2021-12-13T23:51:55+00:00

kali kaneko (leap communications)
kali@leap.se

2021-12-13T23:51:55+00:00

a36b1312503d0f5d3e27bd4e296c0c9adb5e492b












[docs] good practices pointer
2021-12-13T19:24:22+00:00

kali kaneko (leap communications)
kali@leap.se

2021-12-13T19:24:22+00:00

0e0ad6237dae735fa95ca32e9531f678df3981b6












[cc] standardize ua
2021-12-13T17:10:34+00:00

kali kaneko (leap communications)
kali@leap.se

2021-12-13T17:10:34+00:00

55ed8391d5ad741c461bc80b771b82d77b64707f












[bug] initialize openvpn args for obfs4
2021-12-13T17:02:16+00:00

kali kaneko (leap communications)
kali@leap.se

2021-12-13T17:02:16+00:00

d0eeb901a0fd0c787289dc5beae6ed0e66905c42












[docs] snap wisdom + contribution ideas
2021-12-10T20:09:16+00:00

kali kaneko (leap communications)
kali@leap.se

2021-12-10T20:02:40+00:00

2aee25a1dff193a86f2a2cc1ae57cf86488dfdb4












[bug] typo: fix motd
2021-12-10T19:48:37+00:00

kali kaneko (leap communications)
kali@leap.se

2021-12-10T19:48:37+00:00

c79194158babd9d8d7b5f58188ffea71a029fc4d