lzo2 2.07-2/2.08-1 breaks OpenVPN

[rhester72]

With lzo2 2.07-2 and 2.08-1 and use of the "comp-lzo" stanza in OpenVPN, the following fatal error is produced on connect:

Jun 30 16:19:48 tiberius openvpn@server[5612]: Cannot initialize LZO compression library

If you downgrade to lzo2 2.06-3, no error occurs and OpenVPN functions normally.

Rodney

[pnd4]

Thanks for confirming this. If anyone else wishes to downgrade, this worked at the time of this posting.

WARNING - Version 2.06 is vulnerable to attack as mentioned on the author's website: http://www.oberhumer.com/opensource/lzo/

$this->bbcode_second_pass_code('', 'pacman -U http://mirrors.cug.edu.cn/archlinuxarm/arm/core/lzo2-2.06-3-arm.pkg.tar.xz')

[smaxer]

Can anybody upload the lzo2-2.06-3-arm.pkg.tar.xz package pnd4's link doesn't work any longer and it isn't in my locale cache either.

Thanks
smax

[pnd4]

$this->bbcode_second_pass_code('', 'https://dl.dropboxusercontent.com/u/18092548/alarm/lzo2-2.06-3-arm.pkg.tar.xz
https://dl.dropboxusercontent.com/u/18092548/alarm/lzo2-2.06-3-arm.pkg.tar.xz.sig')

Files are from my cache after running the command from my first post.

Links will be good til there's an official fix or I get my PKGBUILD for lzo-2.08 looked over and tested (so I can post it here without the thought of possibly ruining other people's systems weighing on my conscience).. whichever comes first

[pnd4]

You can download my PKGBUILD as well as see explanation for its contents at the following page:

http://www.pnd4.net/blog/2014/07/02/creating-a-pkgbuild-for-lzo-2-dot-08-on-archlinuxarm

So far I still haven't had anyone tell me its working for them, or that there's anything wrong with it. However, its been running on my system for several hours without even the slightest issue. Feel free to let me know if you see any or run into any issues.

[rhester72]

Confirmed Arch ARM official 2.08-1 still has the issue.

Rodney

[slycat]

It appears lzo-2.08-3 is available

Anybody see compatibility issues continue with this update?

[snopkeen]

2.08-3 still has the issue

[br0nd]

Still broken (I don't think I ever remember a package being broken for so long!)

[Geoff]

I don't have a "comp-lzo" line in my openvpn configs. The default value of comp-lzo is supposed to be "adaptive," so I guess it might be using lzo some of the time. However, I have had no problem at all with any version of lzo. I am using lzo 2.08-3 now on both my Cubox-i4pro (server) and my PogoPro (client). They can communicate just fine over openvpn with each other and with my Ubuntu laptop. So maybe a quick and dirty temporary fix is to leave out the comp-lzo line in the openvpn configs.