-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 03 Sep 2026 21:16:58 +0200
Source: openvpn
Architecture: source
Version: 2.7.7-1
Distribution: unstable
Urgency: high
Maintainer: OpenVPN Maintainers <openvpn@packages.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Changes:
openvpn (2.7.7-1) unstable; urgency=high
.
* New upstream version 2.7.7
- CVE-2026-84732 for two fixes in the reliability layer
* Avoid unbounded reliable TLS timeout
* Ignore acks for packets that cannot be outstanding
- dozens of CVEs that are not relevant on Linux
* Fix CVE number in previous changelog entry
Checksums-Sha1:
56ecca33c825e4e8abf9e0af8cda7e92506abf11 2357 openvpn_2.7.7-1.dsc
591e5b9e4f75fd52b88e8eb63e5a8af1b5519cc4 2128305 openvpn_2.7.7.orig.tar.gz
f64008b6bb40c2a26358d1ee03b8f095939de0af 61856 openvpn_2.7.7-1.debian.tar.xz
9e839490c67bcb7682dfaa96f6b678f6a4b2e8ba 7091 openvpn_2.7.7-1_amd64.buildinfo
Checksums-Sha256:
1e2677fa18f729cae368e1106faef3fbf8e747256e09a7b1fc9eb238a53eb73c 2357 openvpn_2.7.7-1.dsc
3ab8f48fd6c26d49ba2333a092433949afdb5c85c0e6a1ff265784fbc04a2463 2128305 openvpn_2.7.7.orig.tar.gz
2f16fbb6f18a4f9802623bada44ec7b3fd240c4113e6ad4136d22b10344be1b1 61856 openvpn_2.7.7-1.debian.tar.xz
0d9d1963946608f82b3b701f4fcf8e3942d8704561ebd1f5109468e50b2b9195 7091 openvpn_2.7.7-1_amd64.buildinfo
Files:
87f65796af0e5e0abbe376f0b580f02e 2357 net optional openvpn_2.7.7-1.dsc
57199727eb49a807e8ba6ed74b00ef5a 2128305 net optional openvpn_2.7.7.orig.tar.gz
afcc22d205c7809a8483f1782bac4c25 61856 net optional openvpn_2.7.7-1.debian.tar.xz
eafeaf8bc2cf4bdd08adeff21bb3a855 7091 net optional openvpn_2.7.7-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=FMkj
-----END PGP SIGNATURE-----
