Commit afdf01

2025-10-24 10:11:36 David Sommerseth: Added platforms affected
Security Announcements/CVE-2025-10680.md ..
@@ 4,6 4,8 @@
The pushed --dns and --dhcp-option arguments are not properly sanitised when passing them to the --dns-updown script hook, allowing them to inject additional commands being performed on the client.
+ This iisue affects only POSIX platforms, such as BSD, Linux, MacOS and similar platforms.
+
Release announcement: [https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00149.html](https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00149.html)
CVE Record: [CVE-2025-10680](https://www.cve.org/CVERecord?id=CVE-2025-10680)
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9