Nixpkgs security tracker

Permalink CVE-2025-15497

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 5 months, 4 weeks ago
@LeSuisse ignored
6 packages
- nagiosPlugins.check_openvpn
- networkmanager-openvpn
- openvpn_learnaddress
- namespaced-openvpn
- openvpn3
- openvpn-auth-ldap
1 month, 2 weeks ago
@LeSuisse dismissed 1 month, 2 weeks ago

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 …

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of service

References

https://community.openvpn.net/Security%20Announcements/CVE-2025-15497 vendor-advisory
https://www.mail-archive.com/openvpn-announce@lists.sourceforge.net/msg00156.ht… release-notes

Affected products

OpenVPN

=<2.7_rc5

Matching in nixpkgs

pkgs.openvpn

Robust and highly flexible tunneling application

nixos-unstable 2.6.14
- nixpkgs-unstable 2.6.14
- nixos-unstable-small 2.6.14

Ignored packages (6)

pkgs.openvpn3

OpenVPN 3 Linux client

nixos-unstable 25
- nixpkgs-unstable 25
- nixos-unstable-small 25

pkgs.openvpn-auth-ldap

LDAP authentication plugin for OpenVPN

nixos-unstable 2.0.4
- nixpkgs-unstable 2.0.4
- nixos-unstable-small 2.0.4

pkgs.namespaced-openvpn

Network namespace isolation for OpenVPN tunnels

nixos-unstable 0.6.0
- nixpkgs-unstable 0.6.0
- nixos-unstable-small 0.6.0

pkgs.openvpn_learnaddress

Openvpn learn-address script to manage a hosts-like file

nixos-unstable 2013-10-21
- nixpkgs-unstable 2013-10-21
- nixos-unstable-small 2013-10-21

pkgs.networkmanager-openvpn

NetworkManager's OpenVPN plugin

nixos-unstable 1.12.3
- nixpkgs-unstable 1.12.3
- nixos-unstable-small 1.12.3

pkgs.nagiosPlugins.check_openvpn

Nagios/icinga/sensu check plugin for OpenVPN

nixos-unstable 0.0.1
- nixpkgs-unstable 0.0.1
- nixos-unstable-small 0.0.1

Package maintainers

@peterhoeg Peter Hoeg <peter@hoeg.com>

Not impacted, nixpkgs did not 2.7 alpha or RC

Suggestions search