-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 09:22:24 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: armel
Version: 2.6.14-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-1+deb13u2) trixie-security; urgency=medium
 .
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
Checksums-Sha1:
 139d45e0f878eb75b10f37217b23694a7738e60d 1251716 openvpn-dbgsym_2.6.14-1+deb13u2_armel.deb
 26867e8ec49062c60883d1a08710636748da6f25 7057 openvpn_2.6.14-1+deb13u2_armel-buildd.buildinfo
 9febafef7a3f733021a332940cece9f7b36205ae 610056 openvpn_2.6.14-1+deb13u2_armel.deb
Checksums-Sha256:
 53561605b2ab879a34eea88d9f6fc4757cd0c97775321d848a630379d9dbdae7 1251716 openvpn-dbgsym_2.6.14-1+deb13u2_armel.deb
 d7fbb1c78eec2d58a20eb6ebbe49f552f1f72d35f3b0d020a5e93ccd8b708d4a 7057 openvpn_2.6.14-1+deb13u2_armel-buildd.buildinfo
 620263cd47fea437cc91a88c9e2f7f6b2a4dd444a86ff2eb21bf710dddeded38 610056 openvpn_2.6.14-1+deb13u2_armel.deb
Files:
 3232da3c708e9af5f38dd972ac5b375c 1251716 debug optional openvpn-dbgsym_2.6.14-1+deb13u2_armel.deb
 d51a1d59050a72509ffcb9bada80e825 7057 net optional openvpn_2.6.14-1+deb13u2_armel-buildd.buildinfo
 71369bca9df04186c8fb066d01d252b8 610056 net optional openvpn_2.6.14-1+deb13u2_armel.deb

-----BEGIN PGP SIGNATURE-----
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=9wqa
-----END PGP SIGNATURE-----