Important: openvpn

Issue Overview: HMAC verification check: fix incorrect memcmp call NOTE: https://community.openvpn.net/Security%20Announcements/CVE-2025-13086 CVE-2025-13086 Affected Packages: openvpn Issue Correction: Run dnf update openvpn --releasever 2023.9.20251208 or dnf update --advisory ALAS2023-2025-131...

CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...

PT-2025-47577

Name of the Vulnerable Software and Affected Versions OpenVPN versions prior to 2.6.16 Description The memcmp function in OpenVPN has an issue related to the use of a cryptographic algorithm with flaws when processing HMAC requests. Successful exploitation could allow a remote attacker to gain...