-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 05 May 2026 22:20:39 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: amd64
Version: 2.6.14-0+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Closes: 1074504
Changes:
 openvpn (2.6.14-0+deb12u1) bookworm-security; urgency=medium
 .
   [ Bernhard Schmidt ]
   * Import upstream version 2.6.14 from debian/trixie stable branch
     - Drop patches superseded by new upstream version
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
   * d/openvpn@.service: Add CAP_SETPCAP required for openvpn-dco-dkms
     (Closes: #1074504)
   * Remove superfluous entries in d/copyright
 .
   [ Remus-Gabriel Chelu ]
   * Add Romanian templates translation
Checksums-Sha1:
 0afbac7e6a92f15af98e9e49a38c9d840097d0d1 1264768 openvpn-dbgsym_2.6.14-0+deb12u1_amd64.deb
 aa415203e5a1bcb4009851086783fd4c2d8bb6ad 7855 openvpn_2.6.14-0+deb12u1_amd64-buildd.buildinfo
 d8e36ab1a682e8eba998a64279ad42bc7fc37266 663556 openvpn_2.6.14-0+deb12u1_amd64.deb
Checksums-Sha256:
 1da818e24a86797a08636d59681010f6652624c488e48d92b8776471b04ac43f 1264768 openvpn-dbgsym_2.6.14-0+deb12u1_amd64.deb
 bb353ed5a001a072c5167dbd19a3d934e454d8218f65b58f86de9548433ca583 7855 openvpn_2.6.14-0+deb12u1_amd64-buildd.buildinfo
 2dd8a6cc04b48afe1ab64de3b366a1d7ab44fcaec739485b69b8bcb53ddc8509 663556 openvpn_2.6.14-0+deb12u1_amd64.deb
Files:
 f6dacc327687fd0b0ad56507ee04cefb 1264768 debug optional openvpn-dbgsym_2.6.14-0+deb12u1_amd64.deb
 d26a11839919539d009e83dbe9d477cd 7855 net optional openvpn_2.6.14-0+deb12u1_amd64-buildd.buildinfo
 9c402bd3500ad4000b8e6bfc42f1c3e1 663556 net optional openvpn_2.6.14-0+deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmoLbgwACgkQbheoBegw
XLI2oA//bx0seYUMjfOE1Am7xpt0tHAYiYPN7YMjcejD2MlfsThIt9lhOknFLwyo
GCDtyV8rjeeelBlUzQGax306uuAA1gePBNkdRacfUl1ma4pfkA+yA5fZtxXv7Oa1
uOYo8cRBUgvRhlaKLuKtuMER243BgCNjMHkaHRxS57U+10dbz4Yc2yipAuyRc7e4
cRAJWcrNXdGskbqRpUn5onGM96AuNzMhcjhfnDjLBNXdNyiZp7UGI9p/HBz2lcHW
FsDoRo/Fyk+QGarSvOFVasEfK8H2Dapk0CRCx63Sp73j8gSxXA1gzfewlj+TLkh1
xgKFDt+pnXjtwsqQa2RMfmdkxLSFF4ZyeyFDCtip2fP/U1nIWLwXlpu4bks/KyVG
FlSEcYHcz/48d0j7Xu3lQKxr+9f/SFBvC4wCM5NBEC7/DeVH6KU5zygwGHypSnm7
Vky3mVa/vDpcAYpGEnGspPzqwypCx2yjvPztwnE+7xfxlvphoubfhWzH+qE0Dtsw
OkvTkI4BQhGtnsDWB4xaw/ovQcwl9hwD2r6e1Ips/fugKmCdyUT6UszlVzTO4SlY
2dPC3tQ14i8LZA+hZaGYV2qJvIFwch569BmGOdf2c4l2zKRf5KrIID/6SIpxXSCe
L8qmFQeJIFLJNAq8TOPXzEtv06avT81Vvn1sQ8+gMpBp+0O+itk=
=PTka
-----END PGP SIGNATURE-----