Update: PureVPN confirmed both issues and published a security advisory. A patched Linux client is expected mid-October. https://www.purevpn.com/blog/security-advisory-linux-client-...