-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 01 Jul 2026 21:46:02 +0200
Source: openvpn
Architecture: source
Version: 2.7.5-1
Distribution: unstable
Urgency: high
Maintainer: OpenVPN Maintainers <openvpn@packages.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Changes:
openvpn (2.7.5-1) unstable; urgency=high
.
[ Bernhard Schmidt ]
* New upstream version 2.7.5
- CVE-2026-12996: Fix use-after-free bug in ack_write_buf(), triggerable by
a well-timed sequence of control channel + authentication packets
- CVE-2026-12117: Fix use-after-free bug in tls_wrap_reneg(), triggerable
by suitable sequence of dynamic tls-crypt control-channel packets
- CVE-2026-13122: Fix server crash on reception of suitably malformed
auth-token, if --auth-gen-token external-auth is active
- CVE-2026-12932: Fix memory-leak in tls-crypt-v2 client key handling that
could lead to out-of-memory situations and subsequent server crashes
- CVE-2026-11771: Fix possible 1-byte buffer overrun on NTLMv2 proxy
responses
- CVE-2026-13698: Fix another memory leak on reception of suitable
tls-crypt-v2 packets that could lead to an out of memory situation and
server crash
.
[ Gianfranco Costamagna ]
* Fixup test for new release
.
[ Marc Haber ]
* split Build-Depends into Build-Depends-Arch
Checksums-Sha1:
daa970716326b8baca1bcca1622505566872a8dc 2357 openvpn_2.7.5-1.dsc
4fe6ddaab159acd8dde7fef64b17e14a18db7ea2 2101063 openvpn_2.7.5.orig.tar.gz
c5e4e0806bb470ab57ddf7a2f7b6fe92db6240b1 61700 openvpn_2.7.5-1.debian.tar.xz
7852f0acac5edaa8ccc49abf4216ed1ecf8f418e 7270 openvpn_2.7.5-1_amd64.buildinfo
Checksums-Sha256:
2e82fe29c0cad73f9110e09b9c4b348da8912d90873d35d20541f4dd0f14defb 2357 openvpn_2.7.5-1.dsc
c6864b3c7d4e059c7d6ce22d1b5fa646c8b379a06af872eeb9792b6083a44ac4 2101063 openvpn_2.7.5.orig.tar.gz
ef59ab320c2b8605d320aed5dbecc6f72f56afcb3595ba518e45f5df942c7f17 61700 openvpn_2.7.5-1.debian.tar.xz
1a49af725a2fbe934cf75dffdd8f4f9c42934d6423d205ff9654dbe9becb1059 7270 openvpn_2.7.5-1_amd64.buildinfo
Files:
677d7a39eee96a196f907abe890ae0b6 2357 net optional openvpn_2.7.5-1.dsc
163f1c2c946b32d15c9971219a5bff45 2101063 net optional openvpn_2.7.5.orig.tar.gz
87a0a70504f44387d02fff2641fc2bce 61700 net optional openvpn_2.7.5-1.debian.tar.xz
2ba2e9bd527caf3c967cfb9875e402da 7270 net optional openvpn_2.7.5-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=ZAPm
-----END PGP SIGNATURE-----
