> Debian: OpenVPN Critical HMAC Flaw Bypass CVE-2025-13086 DSA-6069-1
[DATE: 03/12/2025 21:31]
[LANGUAGE: EN]
It was discovered that openvpn, a virtual private network application, does not properly handle HMAC verification checks. A remote attacker can take advantage of this flaw to bypass source IP address validation. For the oldstable distribution (bookworm), this problem has been fixed in version 2.6.3-1+deb12u4.