Ubuntu alert USN-7898-1 (openvpn)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7898-1] OpenVPN vulnerability
Date:
             
 
Thu, 27 Nov 2025 17:30:26 +0000
Message-ID:
             
 
<E1vOfp4-0005tt-4r@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7898-1
November 27, 2025

openvpn vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 25.04
- Ubuntu 24.04 LTS

Summary:

OpenVPN could allow unintended access to network services.

Software Description:
- openvpn: virtual private network software

Details:

Joshua Rogers discovered that OpenVPN incorrectly handled HMAC verification
checks. A remote attacker could possibly use this issue to bypass source IP
address validation.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  openvpn                         2.6.14-2ubuntu1.1

Ubuntu 25.04
  openvpn                         2.6.14-0ubuntu0.25.04.3

Ubuntu 24.04 LTS
  openvpn                         2.6.14-0ubuntu0.24.04.3

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7898-1
  CVE-2025-13086

Package Information:
  https://launchpad.net/ubuntu/+source/openvpn/2.6.14-2ubun...
  https://launchpad.net/ubuntu/+source/openvpn/2.6.14-0ubun...
  https://launchpad.net/ubuntu/+source/openvpn/2.6.14-0ubun...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmkoiqAACgkQcpJm3tlz
hgHHUQ//Wx/xHMyVpDymMnKMCc3Z/urnovCn0icmZsXrI7dUA4yeuBKmQ371hn8S
M8w6YT76wzPwQoq4WgjqAFHOyKZsvaSyvN0PK5TbsSjKGNWCZ72vXQ5jNiRrFWoQ
M41iiX2+xRwJLy4SA0E7IVs8+iexWMwmpZirgSpg6cmxzXC1NcIroL1oYKNm6l2N
5ijl3QJRNlNfBPAE2atDXYNS/7gwhSf5hMKNB3lK1sJCvV+brB78r0HjHvrUUFBI
w/OQqGW9FtiRBbi/4pK8mdZeDqiZq92oSFK6xmyzls+3lXFPcr5/ai977Pd3mCpe
AqM7yXwzBMQW0WXIVfDMJvbJTpecBVpds9BuetSUz3PjA7GE45OsIS2SG3z1FinH
pJbwnYVVYy2NnVzk6iJpRk30Uo/HwkAznsUHEfeDYRU13nCr59QCYav3C3WAkWW5
1ynXscFbm2inQQLz6f2rJQK7Mn8pyTamcr4886tFIPjwnYyTuFWFDb3Qlzld3UIP
Dn31LFeHtl0DygEbEUr79U95NuOT6LZXOSDdDCFTYdzg6yPjJgMJvDv6qqmoUwjo
ac3jBeRJWCjxobLtKdEM4m5je0Y1rdu94+QIFXpR2pJfQWAa4mRwNj4o4Bhi842p
FhRCXHu2OzpW6cJ1HVw9d8jlDGd1iFEUafeciaJPkG6Ec/cjgI8=
=3iDv
-----END PGP SIGNATURE-----