-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 05 May 2026 22:20:39 +0200 Source: openvpn Binary: openvpn openvpn-dbgsym Architecture: armel Version: 2.6.14-0+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: armel Build Daemon (arm-ubc-03) Changed-By: Bernhard Schmidt Description: openvpn - virtual private network daemon Closes: 1074504 Changes: openvpn (2.6.14-0+deb12u1) bookworm-security; urgency=medium . [ Bernhard Schmidt ] * Import upstream version 2.6.14 from debian/trixie stable branch - Drop patches superseded by new upstream version * Cherry-pick upstream security patches - CVE-2026-40215: fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key * d/openvpn@.service: Add CAP_SETPCAP required for openvpn-dco-dkms (Closes: #1074504) * Remove superfluous entries in d/copyright . [ Remus-Gabriel Chelu ] * Add Romanian templates translation Checksums-Sha1: 2b24313e8c16e1a1885feb35fcd327daf606ef42 1231820 openvpn-dbgsym_2.6.14-0+deb12u1_armel.deb 29aef988fde7c03779875bb04c7eb3174f3eb414 7712 openvpn_2.6.14-0+deb12u1_armel-buildd.buildinfo 022b08bdd65f4574ea769463627f53028736013f 606740 openvpn_2.6.14-0+deb12u1_armel.deb Checksums-Sha256: a05dc245f8408507848055af02b51d52ac90b25b282c4bc7bc8dc91a60fa0f95 1231820 openvpn-dbgsym_2.6.14-0+deb12u1_armel.deb 4c5792aa994d893c460e0f59271e2c355e5ae838e2d4bbf4051650cea02e45d1 7712 openvpn_2.6.14-0+deb12u1_armel-buildd.buildinfo 056f0a8fb8dfafafaed71465a0f6ee8de8360e56206aa4803ac1ae737d5ce0f9 606740 openvpn_2.6.14-0+deb12u1_armel.deb Files: df085afacf8055632a7d0131757838e9 1231820 debug optional openvpn-dbgsym_2.6.14-0+deb12u1_armel.deb 6a458cc8364854e3b47f5c50433f5112 7712 net optional openvpn_2.6.14-0+deb12u1_armel-buildd.buildinfo c4a1e03d0f3a89becca89de5c02f8718 606740 net optional openvpn_2.6.14-0+deb12u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmoLbaQACgkQvzDqKQSG l8WcqRAAw8ch5W3jpGFdOupjqw9RiMy9hPLgIpY3hrAcHfnDFd0O0wftv5y+Thbd GOu1bpn0Kp9N4EEuToBCziOeZfP1llwseMbtFTjhnkbBRQxiQtCk+L5fyfHJFtah VbsNGURMrv6Li2iSrbm/ZJOtk05tamtESQwTBqi1P0Eyuq81RHC0Fl/+9IeNwrsi +p/Xxi322rALnlcW2RGkAH/9jdgF0t5dEj4RvjlpeE5/XAfLzbyMWcMLfx/A5WIP q65fGErPX5FRLgce1K6onbL+R2KsCKHD6OZlzOVJzHmUaNf1MkhUO4AJBivej+OX e++F0X3lFVAZSEtc1G8skOlw7jT93dyRgU0HfrHtLIJScvct1DjgMBPj5SfcPToT IUdG2rIfx6qidwgcxaQClGtUoBLcykCYLxzY+viydlZ1OhJJDrDQXG6i01+koDh0 6ChSNqvJTnYdg5mL3RA7gWHucMGA3u5qaaOslpXh0xO9c9iUJIgt+XvVgHU4STkU KQ2e85WtbKg4URXJGhniJQNdnNMbZcQoTTMuZLku9965jw/Wn+M8TtiPvV+waTQA 6kCR6DIDC3PlKohfZjLLE3l8Rw2nKdjlIYebTizJu6KW2Td+h9PXtmHsbtmZA2OQ SkC36Xo8ttj0vx4f1rk/NRiht0jNSdeFEicmfTBystXqVspXpzw= =vAZi -----END PGP SIGNATURE-----