Commit 561bcf

2026-02-19 12:39:25 David Sommerseth: Adding CVE-2025-10680
Security Announcements.md ..
@@ 7,6 7,7 @@
* [CVE-2025-13751 - Windows/interactive service: fix erroneous exit on error that could be used by a local Windows users to achieve a local denial-of-service](./CVE-2025-13751) (Nov 2025)
* [CVE-2025-13086 - HMAC verification check: fix incorrect memcmp() call](./CVE-2025-13086) (Nov 2025)
* [CVE-2025-12106 - IPv6 address parsing: fix buffer overread on invalid input](./CVE-2025-12106) (Nov 2025)
+ * [CVE-2025-10680 - Suscepticle script injection via --dns-updown script hoook](./CVE-2025-10680) (Oct 2025)
* [CVE-2025-50054 - Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier](./CVE-2025-50054) (June 2025)
* [CVE-2025-3908 - OpenVPN 3 Linux, openvpn3-admin init-config follows symlink](./CVE-2025-3908) (June 2025)
* [CVE-2025-2704 - OpenVPN 2.6.1 through 2.6.13 DoS with dynamic tls-crypt-v2](./CVE-2025-2704) (April 2025)
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9