--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2025-3711fce03c
2025-04-11 01:52:54.571264+00:00
--------------------------------------------------------------------------------

Name        : openvpn
Product     : Fedora 40
Version     : 2.6.14
Release     : 1.fc40
URL         : https://community.openvpn.net/
Summary     : A full-featured TLS VPN solution
Description :
OpenVPN is a robust and highly flexible tunneling application that uses all
of the encryption, authentication, and certification features of the
OpenSSL library to securely tunnel IP networks over a single UDP or TCP
port.  It can use the Marcus Franz Xaver Johannes Oberhumers LZO library
for compression.

--------------------------------------------------------------------------------
Update Information:

Update to upstream OpenVPN 2.6.14
Fixes CVE-2025-2704
--------------------------------------------------------------------------------
ChangeLog:

* Wed Apr  2 2025 Frank Lichtenheld <[email protected]> - 2.6.14-1
- Update to upstream OpenVPN 2.6.14
- Fixes CVE-2025-2704
* Thu Jan 16 2025 Frank Lichtenheld <[email protected]> - 2.6.13-1
- Update to upstream OpenVPN 2.6.13 (RHBZ#2338321)
- Remove RHEL 7 compat code
* Mon Jul 29 2024 Miroslav Suchý <[email protected]> - 2.6.12-2
- convert license to SPDX
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #2357052 - CVE-2025-2704 openvpn: OpenVPN in a server role with 
tls-crypt-v2 enabled can reach an assertion failed state when receiving 
specially crafted packets [fedora-40]
        https://bugzilla.redhat.com/show_bug.cgi?id=2357052
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2025-3711fce03c' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to