We have moved to a new Sailfish OS Forum. Please start new discussions there.

Revision history [back]

click to hide/show revision 1
initial version

posted 2019-12-09 17:09:31 +0200

VPN Leak CVE-2019-14899 is it in Sfos?

Hello all,

as some people already noticed recently would be a leak in Linux spotted by the VPN Interface.
https://seclists.org/oss-sec/2019/q4/122

Does jolla dev team already check this?

Have a nice sails.

Cheers

VPN Leak CVE-2019-14899 is it in Sfos?

Hello all,

as some people already noticed recently would be a leak in Linux spotted by the VPN Interface.
https://seclists.org/oss-sec/2019/q4/122
https://www.bleepingcomputer.com/news/security/new-linux-vulnerability-lets-attackers-hijack-vpn-connections/

Does 2nd link explain more clearly:
"The researchers discovered that most of the Linux distros they tested were vulnerable to attacks exploiting this flaw. They also found that all distros that use systemd versions released after November 28, 2018, that come with Reverse Path filtering switched from Strict mode to Loose mode, are vulnerable."

I think for the best, should jolla dev team already check this?the config by all devices and close this thread, or fix it.

Have a nice sails.

Cheers