SUSE-SU-2026:20196-1

Security update for openvpn

view advisory published 2026-01-29

Security update for openvpn

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-13086US	high7.5OT elevated	0.64% (51st)	—	2025-12-03
Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address w…

references

External citations — patches, advisories, analysis.

SUSE Bug 1254486self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20196-1self
SUSE CVE CVE-2025-13086 pageself
SUSE ratingsexternal
URL for SUSE-SU-2026:20196-1self

remediations (32)

Fixedopenvpn-0:2.6.10-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-0:2.6.10-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-0:2.6.10-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-0:2.6.10-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-0:2.6.10-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-0:2.6.10-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-0:2.6.10-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-0:2.6.10-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-auth-pam-plugin-0:2.6.10-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-auth-pam-plugin-0:2.6.10-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-auth-pam-plugin-0:2.6.10-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-auth-pam-plugin-0:2.6.10-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-auth-pam-plugin-0:2.6.10-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-auth-pam-plugin-0:2.6.10-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-auth-pam-plugin-0:2.6.10-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-auth-pam-plugin-0:2.6.10-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-devel-0:2.6.10-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-devel-0:2.6.10-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-devel-0:2.6.10-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-devel-0:2.6.10-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-devel-0:2.6.10-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-devel-0:2.6.10-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-devel-0:2.6.10-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-devel-0:2.6.10-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-down-root-plugin-0:2.6.10-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-down-root-plugin-0:2.6.10-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-down-root-plugin-0:2.6.10-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-down-root-plugin-0:2.6.10-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-down-root-plugin-0:2.6.10-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-down-root-plugin-0:2.6.10-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-down-root-plugin-0:2.6.10-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedopenvpn-down-root-plugin-0:2.6.10-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan