-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 20 Nov 2025 23:31:00 +0100 Source: openvpn Architecture: source Version: 2.7.0~rc2-2 Distribution: unstable Urgency: medium Maintainer: Bernhard Schmidt <berni@debian.org> Changed-By: Bernhard Schmidt <berni@debian.org> Closes: 1121086 Changes: openvpn (2.7.0~rc2-2) unstable; urgency=medium . * New upstream version 2.7.0~rc2 to unstable - CVE-2025-12106 IPv6 address parsing: fix buffer overread on invalid input - CVE-2025-13086 HMAC verification check: fix incorrect memcmp() call (Closes: #1121086) . * Highlights from the 2.7 upstream release - Multi-socket support for servers -- Handle multiple addresses/ports/protocols within one server - Support for new upstream DCO Linux kernel module + replaces previous ovpn-dco-v2 out-of-tree kernel module with an official kernel module available since Linux 6.16+ Checksums-Sha1: 24698b61ae5c94ca6397607452c842b8d9c3e1b2 2274 openvpn_2.7.0~rc2-2.dsc 64dbcb75012e3a8c2e2e6a6aee4367ef8ba41eac 2080851 openvpn_2.7.0~rc2.orig.tar.gz 48312904ea31be42017a4dd8c066a63fbc29106f 60016 openvpn_2.7.0~rc2-2.debian.tar.xz 6486fb4ef4790adf45e9cc7b70ef93bbf71bb254 7162 openvpn_2.7.0~rc2-2_amd64.buildinfo Checksums-Sha256: e51174cac261c690c2f02623449db7b35cc088ffcb148ae450e706025e16f4fa 2274 openvpn_2.7.0~rc2-2.dsc 6623e8b397dda3a7c05f041099f2f5acb038ea833afded94e7f2811da8b09eae 2080851 openvpn_2.7.0~rc2.orig.tar.gz 8ac58d9af310909cfe4594ae4954bd46e9b9c9a02a0276dfc057793e4345fce6 60016 openvpn_2.7.0~rc2-2.debian.tar.xz 0980bb12224aacbb055643ec34d1629d3946b63e32c0641c8eb55d4a9fe4e73a 7162 openvpn_2.7.0~rc2-2_amd64.buildinfo Files: 00cc7aaef5fb33c07a654d62290669c6 2274 net optional openvpn_2.7.0~rc2-2.dsc e1c60917bcf5e5adca735373a1d6b14e 2080851 net optional openvpn_2.7.0~rc2.orig.tar.gz b7830574786696c02ecc07e67a972213 60016 net optional openvpn_2.7.0~rc2-2.debian.tar.xz 8cf71fe1180027f4b47be8cad3ac5a5c 7162 net optional openvpn_2.7.0~rc2-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEE1uAexRal3873GVbTd1B55bhQvJMFAmkfmZsRHGJlcm5pQGRl Ymlhbi5vcmcACgkQd1B55bhQvJOxOA/9EsMmmRy3wPiyNbt2uKMe0EBuMWbvJm5f ncebB+cir7bPkLkbcdvgD7xlbYqId2mcuVlJ775u3ScRMrkU3DfShsdSUipsmVbM M7F6LFRdS5IxcoUCa6HjQ7fP9EvHAc/QqofcPvSlZFDjjIUwPvPaJoAYFIofgesM bMn0a2FBsGoPMz6aHjd3xyBLkCzHa23zzCy91Hds3dKUrlTvs+RFLPjz+g61zDSf 7Ujn4H5aHFyTyBJEZG4Y/iLgEVae02uICW2qM+WhcCoXnRXkubpBQdJQ1XNkjrme QPJxlqyAQNcmuqaBj0bJvrreOutD/6U3SdU24Jky0t4tjJjbfsX95XbgN2FK6k9R PD/OXLB/z2Yadc08CKtsTqbxzK+YbsEjKhO264GSACWjzj0FFTlr8ifBFcaR8PkQ XmaDqUxBVa7E5wt6b7199ZtT3GpW42UND593I++YQcEL2hO637CVdtbjIlI9dOE4 YRd1x5/+Oz//yXfL15G7epqJyxeq9G+C9Zb63lEhB0iojIrMCjbV4FVaZCgUbd+P RF7cr1y+j5UTQCYE7PowQTu6SVm3VDFnfkHlZ++wobroeEP6fJROaxx8q2tNYpH+ FLZyU9TD5wdy1D6aFJICuOOOuBVL3dLdUkFediQmCV5EV+iV/x4hfQvs95LF7wHh eB90dpaq7qc= =frX2 -----END PGP SIGNATURE-----
