-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 27 Jun 2026 00:01:59 +0200
Source: openvpn
Architecture: source
Version: 2.5.1-3+deb11u3
Distribution: bullseye-security
Urgency: medium
Maintainer: Bernhard Schmidt <berni@debian.org>
Changed-By: Daniel Leidert <dleidert@debian.org>
Changes:
openvpn (2.5.1-3+deb11u3) bullseye-security; urgency=medium
.
* Non-maintainer upload by the Debian LTS team.
* d/patches/CVE-2026-40215-1.patch, d/patches/CVE-2026-40215-2.patch: Add
patches to fix CVE-2026-40215.
- A race condition allows remote attackers to potentially cause a server
crash or leak heap memory via a use-after-free triggered during TLS
session promotion.
* d/patches/CVE-2026-35058.patch: Add patch to fix CVE-2026-35058.
- Improper validation of packet length during tls-crypt-v2 key extraction
allows authenticated attackers to trigger a fatal assertion and cause a
denial of service via a specially crafted packet.
Checksums-Sha1:
3494596d0e4d64e8e5496ca3bde4a1a9ddf77a81 2210 openvpn_2.5.1-3+deb11u3.dsc
3cd781388bc11fe6242f1688bf8c1f9a7b3c22a4 1132708 openvpn_2.5.1.orig.tar.xz
7401831bff7336f0659fc678250a0a058374374a 116380 openvpn_2.5.1-3+deb11u3.debian.tar.xz
be11e9c7f5a989268ee9b06c20e4864d31eae06f 8108 openvpn_2.5.1-3+deb11u3_amd64.buildinfo
Checksums-Sha256:
856efffb469de6a526d8679df265dfe4f60a70ad8b4e04a97037d916e4bf9ba1 2210 openvpn_2.5.1-3+deb11u3.dsc
40930489c837c05f6153f38e1ebaec244431ef1a034e4846ff732d71d59ff194 1132708 openvpn_2.5.1.orig.tar.xz
eabf920b282c5f9c2af51be6b7327df61b9d857e023ef6e15b0cc3c64def7f71 116380 openvpn_2.5.1-3+deb11u3.debian.tar.xz
0c57de92a401335dc53cfd3030b4725e3b137209829874b5e6f1f95741a1c347 8108 openvpn_2.5.1-3+deb11u3_amd64.buildinfo
Files:
7dd25fd06750be3358ba28122a555e51 2210 net optional openvpn_2.5.1-3+deb11u3.dsc
754f7b00c5d19bb488f56ffc5ab492f2 1132708 net optional openvpn_2.5.1.orig.tar.xz
3500406b358050a0942ec6dcd5e7b7af 116380 net optional openvpn_2.5.1-3+deb11u3.debian.tar.xz
339ddf44be10cd3e99d9568abbb8c033 8108 net optional openvpn_2.5.1-3+deb11u3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=VsWV
-----END PGP SIGNATURE-----
