-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 09:22:24 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: i386
Version: 2.6.14-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-1+deb13u2) trixie-security; urgency=medium
 .
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
Checksums-Sha1:
 02c6143979051942dc62d69cad81263bd4438993 1138404 openvpn-dbgsym_2.6.14-1+deb13u2_i386.deb
 e1e2476f87e4a9e97118b08feffd7733a47c51b4 7106 openvpn_2.6.14-1+deb13u2_i386-buildd.buildinfo
 dba88b6297d7f493def24e5f4eb1bad31328b86c 701396 openvpn_2.6.14-1+deb13u2_i386.deb
Checksums-Sha256:
 048cab63be0644e9f3ec5469236b040134e57f3def78da996b472dfd82a8b800 1138404 openvpn-dbgsym_2.6.14-1+deb13u2_i386.deb
 c5e9ca03146cf35efa6e0bcd3a0cd5c69b8666ffdc9647d12753c91b63d2e63a 7106 openvpn_2.6.14-1+deb13u2_i386-buildd.buildinfo
 b856878c69c332419d27a9029bc202bb011355c6f2f09c0939592bc251d2696b 701396 openvpn_2.6.14-1+deb13u2_i386.deb
Files:
 a58a15f6d7ebcc84e7e3bc7559f5c163 1138404 debug optional openvpn-dbgsym_2.6.14-1+deb13u2_i386.deb
 50b487df920c052018ab17bced022364 7106 net optional openvpn_2.6.14-1+deb13u2_i386-buildd.buildinfo
 c754a00f9adac4497520d37f39240e67 701396 net optional openvpn_2.6.14-1+deb13u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=NNOM
-----END PGP SIGNATURE-----