-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 05 May 2026 22:20:39 +0200 Source: openvpn Binary: openvpn openvpn-dbgsym Architecture: ppc64el Version: 2.6.14-0+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Bernhard Schmidt Description: openvpn - virtual private network daemon Closes: 1074504 Changes: openvpn (2.6.14-0+deb12u1) bookworm-security; urgency=medium . [ Bernhard Schmidt ] * Import upstream version 2.6.14 from debian/trixie stable branch - Drop patches superseded by new upstream version * Cherry-pick upstream security patches - CVE-2026-40215: fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key * d/openvpn@.service: Add CAP_SETPCAP required for openvpn-dco-dkms (Closes: #1074504) * Remove superfluous entries in d/copyright . [ Remus-Gabriel Chelu ] * Add Romanian templates translation Checksums-Sha1: 35101a40857297864a1a1f8533013fbe6cb46c9d 1306752 openvpn-dbgsym_2.6.14-0+deb12u1_ppc64el.deb 8738f5eb6b6a23ef57b56cf193524e54be8bdec1 7867 openvpn_2.6.14-0+deb12u1_ppc64el-buildd.buildinfo 7c4295556a0a706b21efe8fc44839b0fe9c46134 690316 openvpn_2.6.14-0+deb12u1_ppc64el.deb Checksums-Sha256: 88e2a233e456fd04706cf50ea852155514e81f9ec91e93f72e620f3f56563831 1306752 openvpn-dbgsym_2.6.14-0+deb12u1_ppc64el.deb 16a6508d33bced7663037c346760b0d021253dd9f36b9301a52b0e76d510c91c 7867 openvpn_2.6.14-0+deb12u1_ppc64el-buildd.buildinfo 0efc83636af4c9346bcadf70bd3223a58e91897c8e7dadda8c694d5ebbd357dd 690316 openvpn_2.6.14-0+deb12u1_ppc64el.deb Files: d85d37e9f5559471822656f550205488 1306752 debug optional openvpn-dbgsym_2.6.14-0+deb12u1_ppc64el.deb 1fea5820b79b4add07cddcbedf41b2b4 7867 net optional openvpn_2.6.14-0+deb12u1_ppc64el-buildd.buildinfo 618ecc94f1a870cc7850a93e5a8c4153 690316 net optional openvpn_2.6.14-0+deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmoLbZsACgkQNINNphgy m2TK6A/6A+cvCY5tZ7KMC34x74o6NgF5tX6G+rGmvZA42emtDZmJGvacOPDBCexy BYWCajGQoI7I7QNdWavTcKOtM46P/OT3pWH9njSZr/dIyRk3XB2AryZyzZTMmxEl VKavAo/l5gPbmETMsa6nnKCFqcr+xWwWGyqyr8TR0S4LTYM/LlRRbK9S6HBVYwIR U5/0WMTQR0Z0frDUEeZxwRSTQiFGeIPn0c1zbCBrGA4V6BJm6AnUeQFcKuK1ufiA h4Q2TerjujoKbdaWaD6+FRdvhegZByd4O479Vy48Q57B3wfFo/YEb5v6hSh9M4Vj s0sUrzZaoDBpc17Jr3736jL83NFjUK86/FQm+YpTF41hW4ucHW5fCowEs9OtDTct XcSCJ/gm2LoTa7Fpo+5bYUSBY5ytZr6neFGX+PKTPSP6BH5DyxByiezhuUIVslfM QNnIhq1P7IXHxETqh2EhSLnsVIBvxUKaqbYtYYPlnJ2dqzdoMEV2AsU8SXcIgB8x GqsCfO3QXWfmPIZkyCBK5hdvSN/yDb5BnC2yTISs24jKJ3ito/plFJqmg68d/9x+ jRtu75b2GgnsZrJEDYYdp9dbuly0eqYCBFhZBAj8yTsLELiMdqXmUgmEIpcGdO/s Wf/G9ASvj1mB7rTFWuWL2w7W7qoBuJ7SWBN+ZJm/FbiSiCxRoPY= =hKve -----END PGP SIGNATURE-----