Commit d7f686

2025-05-19 14:58:36 David Sommerseth: -/-
Security Announcements/CVE-2025-3908.md ..
@@ 1,3 1,8 @@
- # CVE-2025-3908
+ # CVE-2025-3908 - OpenVPN 3 Linux, openvpn3-admin init-config follows symlink
+ The OpenVPN 3 Linux v20 introduced a new helper command to help getting an initial base configuration adopted to the currently running host. It was discovered that this tool will follow symlinks when changing ownership and permissions on two if the directories the OpenVPN 3 Linux D-Bus services depends on.
- (to be published)
+ This has been resolved in OpenVPN 3 Linux v24.1.
+
+ https://www.cve.org/CVERecord?id=CVE-2025-3908
+
+ Reported by: Wolfgang Frisch, SUSE Security team
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9