-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 05 May 2026 22:20:39 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: arm64
Version: 2.6.14-0+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Closes: 1074504
Changes:
 openvpn (2.6.14-0+deb12u1) bookworm-security; urgency=medium
 .
   [ Bernhard Schmidt ]
   * Import upstream version 2.6.14 from debian/trixie stable branch
     - Drop patches superseded by new upstream version
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
   * d/openvpn@.service: Add CAP_SETPCAP required for openvpn-dco-dkms
     (Closes: #1074504)
   * Remove superfluous entries in d/copyright
 .
   [ Remus-Gabriel Chelu ]
   * Add Romanian templates translation
Checksums-Sha1:
 442742c8cc5752d229f337a5be2bd94136c9ec15 1246540 openvpn-dbgsym_2.6.14-0+deb12u1_arm64.deb
 f1a0f0a64c16c4c7c9446e5116d637f31cab0b09 7870 openvpn_2.6.14-0+deb12u1_arm64-buildd.buildinfo
 166bbf429150e378ffec5fb24524e99ed64730b9 628776 openvpn_2.6.14-0+deb12u1_arm64.deb
Checksums-Sha256:
 6efdc07fa801a6b4eb7a8cd665e092ed92c9119549adc8d8635b065d339121c7 1246540 openvpn-dbgsym_2.6.14-0+deb12u1_arm64.deb
 155c4eeaaf1612e413f59ffbea92ae2d9c4e0c3c94989f9dd44c3f1f7cd2ba95 7870 openvpn_2.6.14-0+deb12u1_arm64-buildd.buildinfo
 a5aa327648f562a5a9e87d75651a212e3e0f1e230c78535218d95662d288d571 628776 openvpn_2.6.14-0+deb12u1_arm64.deb
Files:
 4c74ca4a5dc067150eac800ce5cc2fc0 1246540 debug optional openvpn-dbgsym_2.6.14-0+deb12u1_arm64.deb
 15a7d44aa481d120efbc7dff090d1e5c 7870 net optional openvpn_2.6.14-0+deb12u1_arm64-buildd.buildinfo
 990c5a7c7378ebfc5f4bff7e221fd365 628776 net optional openvpn_2.6.14-0+deb12u1_arm64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmoLbZYACgkQxqCFmsOW
goZmDBAAk7ildabBYJlXR4B6XPLS/WP8cmVbwrIFi5O4ohHR1vun2nYLwO5Yvmlq
91bN+tAOAXbAyXqGlBg7pAmBBNKwgoV0QcfgdI1iMTXCovxEWXxkSKUCGwQE5N7S
7KilVq00w915bI/h8uu1vg32p7oBY7JKiROExkLgVJ8R7Azeqq85APJVklv1BT82
PrTkyDnHR7yvDrcRxsCsqP7qRtT3L3NFjmWtHD+lI9M/C1FR0d+b1uvMnYlNTg4o
MsT+ldvvCApxUVluWF8MpU0Tclfw6sZ6H9ErjbqlcwE8hEZmfnDlUtYrMQLIQlTA
x6I+VQGUiL48R3bfQ0P5E/wrlkdyuhtzqnGB7GCLBInJ2Fe2e3gRgfRXa42x+4ST
1T1XpJXRvXPv07dMytTat2yMaCqVftpxjWwSuUAYyJj3Quev7g1Rsl2ah/ebrFED
RzCuNIA8qskf92is5CCadmeXq1c4jXeOh8IF7O4cfEuAQvBMxXLi5JeaLdUgedmg
eQkWlE7pzMxrUgeBbi0/U4xWKoVYBl2AwIBpE+/TWuXMR8Al6zk2czBEXTiCDkQB
712QnaXmvHdWXjyfu35+8Hyu3s81EohhOd9PI9oxgfFwgQsGPb14VzlEXgJ4mwf2
zuYHS8rgWEsiVSA5mIufDy3nBvai+8kbjtAHvcwviAQ42kvBVnE=
=x0/k
-----END PGP SIGNATURE-----