-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 05 May 2026 22:20:39 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: armhf
Version: 2.6.14-0+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Closes: 1074504
Changes:
 openvpn (2.6.14-0+deb12u1) bookworm-security; urgency=medium
 .
   [ Bernhard Schmidt ]
   * Import upstream version 2.6.14 from debian/trixie stable branch
     - Drop patches superseded by new upstream version
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
   * d/openvpn@.service: Add CAP_SETPCAP required for openvpn-dco-dkms
     (Closes: #1074504)
   * Remove superfluous entries in d/copyright
 .
   [ Remus-Gabriel Chelu ]
   * Add Romanian templates translation
Checksums-Sha1:
 fa09e31b6f18e830c6d09308475f7124fc58d3de 1237092 openvpn-dbgsym_2.6.14-0+deb12u1_armhf.deb
 1eff873ef08f6fcd0e4e48687e8aed29a0a2507b 7714 openvpn_2.6.14-0+deb12u1_armhf-buildd.buildinfo
 f662a5fe5b90bc40991bb7abc6f1d13eb30d6b3a 612732 openvpn_2.6.14-0+deb12u1_armhf.deb
Checksums-Sha256:
 efedc188b586af7307dbfaf17abf5da9499618a47229e8a3e0af869c3d323172 1237092 openvpn-dbgsym_2.6.14-0+deb12u1_armhf.deb
 b72159e87cbc200e1665ff79a42928bcc13ae89de8aec2f6f11f83568a5ce2f0 7714 openvpn_2.6.14-0+deb12u1_armhf-buildd.buildinfo
 c712716f30b01a31ed4d043e294a6f0045686917e9faf353046d6b77b55d85a1 612732 openvpn_2.6.14-0+deb12u1_armhf.deb
Files:
 3c2812eaab7e5fee1aa7b5d84e670da3 1237092 debug optional openvpn-dbgsym_2.6.14-0+deb12u1_armhf.deb
 e400c5e4eb681e7517c2005182a23e4e 7714 net optional openvpn_2.6.14-0+deb12u1_armhf-buildd.buildinfo
 0c55c59670254fe73d2ae61ac90ef0f4 612732 net optional openvpn_2.6.14-0+deb12u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=XPw2
-----END PGP SIGNATURE-----