-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 09:22:24 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: s390x
Version: 2.6.14-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-1+deb13u2) trixie-security; urgency=medium
 .
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
Checksums-Sha1:
 1caf478910152d0f299714e2313deb5f1883efdf 1265532 openvpn-dbgsym_2.6.14-1+deb13u2_s390x.deb
 2abb3ec4be6f1fa69ac21706b4a88a4a31b15ee4 7067 openvpn_2.6.14-1+deb13u2_s390x-buildd.buildinfo
 13c9e3a3c6fcf491881415e7d91c651e3df41679 631292 openvpn_2.6.14-1+deb13u2_s390x.deb
Checksums-Sha256:
 14a8fa5a5e34de7b5af3c43522a6fdc285b4daa08c9f7755b30dc9721a560cb7 1265532 openvpn-dbgsym_2.6.14-1+deb13u2_s390x.deb
 268f506b0d0a94efae753cc4f42f5d1c65f4e84928b2c0c58bb9e0384f0e6137 7067 openvpn_2.6.14-1+deb13u2_s390x-buildd.buildinfo
 fcdd778a9e550b5fd3317a6415db6e769c6c8bbc084a18e3c298eacafc824329 631292 openvpn_2.6.14-1+deb13u2_s390x.deb
Files:
 e10dbb844205359897b0e86370025244 1265532 debug optional openvpn-dbgsym_2.6.14-1+deb13u2_s390x.deb
 3556a045fe417eb9a7e8e158a7a663f8 7067 net optional openvpn_2.6.14-1+deb13u2_s390x-buildd.buildinfo
 eb230d4e71c31e15da2bc5167bdbe5c9 631292 net optional openvpn_2.6.14-1+deb13u2_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=Y9rB
-----END PGP SIGNATURE-----