Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4217-1

Опубликовано: 16 сент. 2026
Источник: suse-cvrf

Описание

Security update for openvpn

This update for openvpn fixes the following issues:

  • CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310).
  • CVE-2026-84732: Remote Denial of Service via crafted ACK packets (bsc#1279613).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
openvpn-2.5.6-150400.3.28.1
openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
openvpn-2.5.6-150400.3.28.1
openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
openvpn-2.5.6-150400.3.28.1
openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
openvpn-2.5.6-150400.3.28.1
openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise Server 15 SP4-LTSS
openvpn-2.5.6-150400.3.28.1
openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise Server 15 SP5-LTSS
openvpn-2.5.6-150400.3.28.1
openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
openvpn-2.5.6-150400.3.28.1
openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
openvpn-2.5.6-150400.3.28.1
openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
openvpn-devel-2.5.6-150400.3.28.1

Ссылки

Описание

OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:openvpn-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:openvpn-2.5.6-150400.3.28.1
Ссылки

Описание

Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:openvpn-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:openvpn-auth-pam-plugin-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:openvpn-devel-2.5.6-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:openvpn-2.5.6-150400.3.28.1
Ссылки
Уязвимость SUSE-SU-2026:4217-1