Bugs fixes in "openvpn"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-13698 | A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-cry | 2026-07-14 |
| CVE | CVE-2026-13122 | OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication | 2026-07-14 |
| CVE | CVE-2026-13698 | A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-cry | 2026-07-14 |
| CVE | CVE-2026-13122 | OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication | 2026-07-14 |
| Launchpad | 2127658 | Backport of openvpn for noble and questing | 2026-03-05 |
| CVE | CVE-2025-13086 | HMAC verification check: fix incorrect memcmp() call | 2026-02-26 |
| Launchpad | 2127658 | Backport of openvpn for noble and questing | 2026-02-26 |
| CVE | CVE-2025-13086 | HMAC verification check: fix incorrect memcmp() call | 2025-11-27 |
| CVE | CVE-2025-13086 | HMAC verification check: fix incorrect memcmp() call | 2025-11-27 |
| Launchpad | 2108860 | floating IP due to \ | 2025-09-23 |
| Launchpad | 2108860 | floating IP due to \ | 2025-09-10 |
| Launchpad | 2040467 | Backport upstream microreleases for questing cycle | 2025-07-16 |
| CVE | CVE-2025-2704 | OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and repla | 2025-07-02 |
| Launchpad | 2040467 | Backport upstream microreleases for questing cycle | 2025-07-02 |
| Launchpad | 2097688 | [BPO] openvpn/2.6.12 from Noble to Jammy | 2025-05-06 |
| CVE | CVE-2025-2704 | OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and repla | 2025-04-03 |
| CVE | CVE-2025-2704 | OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and repla | 2025-04-03 |
| CVE | CVE-2024-27903 | OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in | 2024-10-10 |
| CVE | CVE-2024-24974 | The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to inter | 2024-10-10 |
| CVE | CVE-2024-27459 | The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary | 2024-10-10 |
About
-
Send Feedback to @ubuntu_updates
