OpenVPN CVE-2025-13751 Local Service Denial of Service Fix

Critical Vulnerability Information CVE-2025-13751: - Description: A bug fix in Windows/Interactive Service to prevent the Interactive Service from incorrectly exiting under certain error conditions, which could cause OpenVPN connections to remain disconnected until the service or system is restarted. This vulnerability can be triggered by any authenticated local user and is classified as a "local denial-of-service" attack. Security Fixes and Important Bug Fixes: - Numerous minor fixes related to registry-based DNS domain name handling. - Strengthened service pipe handling, closing a small race condition, and adding restrictive ACLs. - Fixed additional warnings related to type conversions. - Changed multi-home behavior regarding outgoing interface selection. - Cleaned up dead code in event handling (legacy from multi-socket patch sets). - New feature: . See details in Changes.rst and manpage. - Improved documentation quality, highlighting pitfalls related to case-insensitive filesystems and . - Split default gateway query logic into two parts: for , query the gateway via the actual connected VPN server's IP address; for the "net_gateway" special destination and corresponding environment variables, always query (this makes a difference in scenarios using local proxies or systems with multiple interfaces, where the VPN connection does not use the "default route"). - Upgraded nested patch to version . - CMake / autoconf cleanup: removed unused checks, outdated old Linux checks, and Windows "quirks". - DCO (primarily for Linux): improved handling of large numbers of notifications from the kernel (no dropped notifications, no crashes) (github#900).

Goal Reached Thanks to every supporter — we hit 100%!

OpenVPN CVE-2025-13751 Local Service Denial of Service Fix