-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 09:22:24 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: amd64
Version: 2.6.14-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-1+deb13u2) trixie-security; urgency=medium
 .
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
Checksums-Sha1:
 75e2b0ac9def91139980d548ecddeba2a0b072ab 1275132 openvpn-dbgsym_2.6.14-1+deb13u2_amd64.deb
 d699058348ad08dbbb12ca5e5a6ad80e6bf77b42 7205 openvpn_2.6.14-1+deb13u2_amd64-buildd.buildinfo
 595a481b15423975da843c5f812fc240406c7e59 662348 openvpn_2.6.14-1+deb13u2_amd64.deb
Checksums-Sha256:
 698bffefa2ede20b1ef1420a21da5c45a831369acaa4423b4ce928afa62fa504 1275132 openvpn-dbgsym_2.6.14-1+deb13u2_amd64.deb
 7cec2a8933927315ee8c73a7c8b107a9307984729e4048beaa1cf4dce9d963e0 7205 openvpn_2.6.14-1+deb13u2_amd64-buildd.buildinfo
 66d1acd9b0120538ea02f725fafc06345d4c831b84a9805e67102fc2401c12a3 662348 openvpn_2.6.14-1+deb13u2_amd64.deb
Files:
 d2e62055d9f9ae90011e868b667af501 1275132 debug optional openvpn-dbgsym_2.6.14-1+deb13u2_amd64.deb
 3df9f9a636ff811eaa0e4f3ae07aa2c2 7205 net optional openvpn_2.6.14-1+deb13u2_amd64-buildd.buildinfo
 464aeaec17ff79dffb25e1a20e1e0bfc 662348 net optional openvpn_2.6.14-1+deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=dy3s
-----END PGP SIGNATURE-----