Package openvpn: Information

    Source package: openvpn
    Version: 2.6.19-alt1
    Build time:  Feb 14, 2026, 02:27 PM
    Category: System/Servers
    Report package bug
    Summary: a full-featured SSL VPN solution
    Description: 
    OpenVPN is a full-featured SSL VPN solution which can accomodate
    a wide range  of configurations,  including road warrior access,
    home/office/campus  telecommuting,  WiFi security, secure branch
    office  linking,  and enterprise-scale  remote access  solutions
    with load balancing, failover, and fine-grained access-controls.

    List of RPM packages built from this SRPM:
    openvpn (riscv64)
    openvpn-debuginfo (riscv64)
    openvpn-devel (noarch)
    openvpn-docs (noarch)
    openvpn-plugins (riscv64)
    openvpn-plugins-debuginfo (riscv64)

    Maintainer: Nikolay A. Fetisov

    List of contributors:
    Nikolay A. Fetisov
    Gleb Fotengauer-Malinovskiy
    qa-robot

      1. libsystemd-devel
      2. cmake
      3. liblz4-devel
      4. liblzo2-devel
      5. libcap-ng-devel
      6. python3-module-docutils
      7. libpam-devel
      8. libpkcs11-helper-devel
      9. net-tools
      10. git-core
      11. rpm-build-licenses
      12. glibc-devel-static
      13. libselinux-devel
      14. time
      15. iproute2

    Last changed


    Feb. 12, 2026 Nikolay A. Fetisov 2.6.19-alt1
    - New version
    - Fixes:
       + CVE-2025-13751: Windows/interactive service erroneous exit on error
       + CVE-2025-13086: fix memcmp check for the HMAC 3-way handshake verification
       + Fix errors checks in auth plugin/script handling
       + Fix socket FDs leaking to child processes for incoming TCP connections
       + Repair client-side interaction on reconnect between DCO event handling
         and '--persist-tun'
    Nov. 5, 2025 Nikolay A. Fetisov 2.6.15-alt1
    - New version
    - Fixes:
      + CVE-2025-2704: possible ASSERT() on OpenVPN servers using --tls-crypt-v2
      + Improve server-side handling of clients sending too long usernames/passwords
      + Bring back configuring of broadcast address on Linux tun/tap interface
      + Linux DCO: repair source IP selection for --multihome
      + Correctly handle case of "route installation fails" for an already-existing
        routes
    - Fix format of the OpenSSL license exception in License tag
    Aug. 1, 2024 Nikolay A. Fetisov 2.6.12-alt1
    - New version
    - Fixes:
      + CVE-2024-5594: filter control channel messages with nonprintable chars
      + CVE-2024-28882: only call schedule_exit() once (on a given peer)
      + CVE-2024-4877: Windows: harden interactive service pipe
      + Fix bug preventing Http-proxy credentials caching