Patch has been applied to the release/2.7 and release/2.6 branch (bugfix).
The NTLM code in release/2.6 is different enough (NTLMv1 not removed yet)
that it a straightforward "git cherry-pick" does not work, but the offending
line is there and fixed just the same (">" -> ">=").
commit 04309bfe0313c09edd02c29945893b9d7e2ca920 (release/2.7)
commit e1bf48ab80a22598000a7ab83d3688f07d139cc7 (release/2.6)
Author: Gert Doering
Date: Thu Jun 18 14:37:24 2026 +0200
Fix 1-byte buffer overrun on NTLMv2 proxy responses.
Signed-off-by: Gert Doering <[email protected]>
Acked-by: Arne Schwabe <[email protected]>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1713
Message-Id: <[email protected]>
URL:
https://www.mail-archive.com/[email protected]/msg37218.html
Signed-off-by: Gert Doering <[email protected]>
--
kind regards,
Gert Doering
_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
