Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4213-1

Опубликовано: 16 сент. 2026
Источник: suse-cvrf

Описание

Security update for openvpn

This update for openvpn fixes the following issues:

  • CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310).
  • CVE-2026-84732: Remote Denial of Service via crafted ACK packets (bsc#1279613).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP7
openvpn-2.6.10-150600.3.37.1
openvpn-auth-pam-plugin-2.6.10-150600.3.37.1
openvpn-dco-2.6.10-150600.3.37.1
openvpn-dco-devel-2.6.10-150600.3.37.1
openvpn-devel-2.6.10-150600.3.37.1
SUSE Linux Enterprise Server 15 SP6-LTSS
openvpn-2.6.10-150600.3.37.1
openvpn-auth-pam-plugin-2.6.10-150600.3.37.1
openvpn-dco-2.6.10-150600.3.37.1
openvpn-dco-devel-2.6.10-150600.3.37.1
openvpn-devel-2.6.10-150600.3.37.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
openvpn-2.6.10-150600.3.37.1
openvpn-auth-pam-plugin-2.6.10-150600.3.37.1
openvpn-dco-2.6.10-150600.3.37.1
openvpn-dco-devel-2.6.10-150600.3.37.1
openvpn-devel-2.6.10-150600.3.37.1

Ссылки

Описание

OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:openvpn-2.6.10-150600.3.37.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:openvpn-auth-pam-plugin-2.6.10-150600.3.37.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:openvpn-dco-2.6.10-150600.3.37.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:openvpn-dco-devel-2.6.10-150600.3.37.1
Ссылки

Описание

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP7:openvpn-2.6.10-150600.3.37.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:openvpn-auth-pam-plugin-2.6.10-150600.3.37.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:openvpn-dco-2.6.10-150600.3.37.1
SUSE Linux Enterprise Module for Basesystem 15 SP7:openvpn-dco-devel-2.6.10-150600.3.37.1
Ссылки
Уязвимость SUSE-SU-2026:4213-1