-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 05 May 2026 22:20:39 +0200 Source: openvpn Binary: openvpn openvpn-dbgsym Architecture: i386 Version: 2.6.14-0+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Bernhard Schmidt Description: openvpn - virtual private network daemon Closes: 1074504 Changes: openvpn (2.6.14-0+deb12u1) bookworm-security; urgency=medium . [ Bernhard Schmidt ] * Import upstream version 2.6.14 from debian/trixie stable branch - Drop patches superseded by new upstream version * Cherry-pick upstream security patches - CVE-2026-40215: fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key * d/openvpn@.service: Add CAP_SETPCAP required for openvpn-dco-dkms (Closes: #1074504) * Remove superfluous entries in d/copyright . [ Remus-Gabriel Chelu ] * Add Romanian templates translation Checksums-Sha1: 18a0cc43ca237adfd42ea33525a8da433979adff 1126088 openvpn-dbgsym_2.6.14-0+deb12u1_i386.deb 87a2897f9ce1055e252cdb2c4094a1b7c68d9b01 7795 openvpn_2.6.14-0+deb12u1_i386-buildd.buildinfo 73d098b25a44c2dc5156ba07578c2b3ac35a900f 701500 openvpn_2.6.14-0+deb12u1_i386.deb Checksums-Sha256: 2e6267e0ecee33160d8d302571564ccca60cbb36b680fdd095067bbef1904188 1126088 openvpn-dbgsym_2.6.14-0+deb12u1_i386.deb 4c05d2d0bc515d9d7bd6cb625a43e2fc98d28fb76a756ecfd08e0b630b4a3508 7795 openvpn_2.6.14-0+deb12u1_i386-buildd.buildinfo d872cf0a56ca556f8fa4d93cebd2d8c8f8b12569c16e826062c2ac856a9f9239 701500 openvpn_2.6.14-0+deb12u1_i386.deb Files: a4a7fcadd9372362ee66cb3165f2bd33 1126088 debug optional openvpn-dbgsym_2.6.14-0+deb12u1_i386.deb 3edf7abaef72ff36c0b00e239a2f50a8 7795 net optional openvpn_2.6.14-0+deb12u1_i386-buildd.buildinfo d58807380b97ba38580341cf97968ec3 701500 net optional openvpn_2.6.14-0+deb12u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPAUaMA0H0rOy6qBWf2INRiCdaWIFAmoLbfEACgkQf2INRiCd aWLS4A/+IYfvk85purTyzuxsFUspJPgipHaYFJnrzZ6pGBh+EyWz3rE7BUzDequ4 nmEvMH5MX6NYOOPYtkRr96UuiOtVfKHVMJnQznuejG+ZHbrQM4A2ZMgKewdYpCjF V6+lyXpWRgAhhvzwp/te/kB+NfFD+RtIjzGcvDfzQbxs1xPmbqFoSeRshQ/L0oyc PfMQ7/q04+pLqtCcDZZPQQY96uBNyW2hQzyOWhCwsltzUNv1R2i6tasGnXj/TiFS WohvlSme1LCRKFtC18zO3zeMG4LRy7Oj353Ulk+a2QwsPXBYPMpQ55xXzmZv2BSz e4+qbMhf+vqxTe955AayNG87aquB4PI4+mC4m028eTxc8bOJMnnGFtWP2AxeXfdI k5eqtP5ka666hkwMUUzHleH9jSuD9uec3X+KPb3In/TUZ7WTMqfZTqA85ecGslO5 Mv8FX9zIFGRtvLKcWE5MXwDj4v3eWNT8PZJpj/45Lq8N3rB44uHj/kJawgx6E2qp SHjbCfre/Ha00AX054SDRbCRv0WUmwhWtE6uGbg8jdL1b/Mg3IwPAjSKOpDEmk8s BTZYyhOha/SaRWGpZhsypa4SBV77i1gsZoSuIJQuSzka8p0HRrLyNCH30T82iesd lJJisbwOfk3Sd66jwcRfAsJqeqCMvpRRuZjZypFDhPIXXFlAdPU= =Q6wj -----END PGP SIGNATURE-----