Skip to content

[Deepin Integration]~[v25-Release] fix(openvpn): CVE-2025-13086 by deepin-ci-robot@deepin-community/openvpn by deepin-community-ci-bot[bot] #13301

@deepin-bot

Description

@deepin-bot

Package information | 软件包信息

包名 版本
openvpn 2.6.14-3deepin1

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4043/testing/ ./

Changelog | 更新信息

openvpn (2.6.14-3deepin1) unstable; urgency=medium

  • CVE-2025-13086: Fix inverted memcmp check for HMAC verification in the
    3-way handshake, which allowed source IP address validation bypass.

Metadata

Metadata

Labels

Type

No type
No fields configured for issues without a type.

Projects

Status

In progress

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions