Commit 6aedcb

2026-10-07 13:51:14 flichtenheld: -/-
Security Announcements.md ..
@@ 3,10 3,9 @@
This page lists all security announcements made by the OpenVPN project.
# Announcements
- * [CVE-2026-105390](./CVE-2026-105390) (October 2026)
- * [CVE-2026-84256](./CVE-2026-84256) (October 2026)
- * [CVE-2026-84790](./CVE-2026-88964) (October 2026)
- * [CVE-2026-84790](./CVE-2026-84790) (October 2026)
+ * [CVE-2026-105390 - ovpn-dco-win: unprivileged local DoS - device lock held across socket send deadlocks the host](./CVE-2026-105390) (October 2026)
+ * [CVE-2026-88964 - Unsigned underflow and OOB access on malicious PUSH_UPDATE from server](./CVE-2026-88964) (October 2026)
+ * [CVE-2026-84790 - Remote identity/authentication bypass via embedded NUL in certificate subject field](./CVE-2026-84790) (October 2026)
* [CVE-2026-84732 - Unbounded reliable TLS timeout and acks for non-outstanding packets](./CVE-2026-84732) (September 2026)
* [CVE-2026-84471 - Possible double-free in check_session_buf_not_used() lame duck handling](./CVE-2026-84471) (September 2026)
* [CVE-2026-84256 - Windows CreateProcess() command line quoting bypass via cmd.exe metacharacters](./CVE-2026-84256) (September 2026)
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9