Hi Youri,
>
Upgrading openvpn from 2.5.1-3 to 2.5.1-3+deb11u3 lead to segfault crashes.
I'm seeing TLS timeouts too in the logs but I'm unsure if those are
correlated.
[Thu Jul 2 23:12:05 2026] openvpn[2387385]: segfault at 0 ip
000055f1ee7aec87 sp 00007ffc69242b50 error 4 in openvpn[55f1ee73d000+86000]
[Thu Jul 2 23:12:05 2026] Code: f2 8b 05 3c 55 05 00 45 31 ed 85 c0 75
53 c7 43 08 00 00 00 00 48 c7 43 10 00 00 00 00 5b 41 5c 41 5d c3 48 8b
8e 18 05 00 00 <8b> 11 85 d2 7e ed 48 8b 49 70 45 31 e4 eb 13 66 2e 0f
1f 84 00 00
Symbols are stripped in the binary so I could not get more information.
Rolling back the openvpn version fixed the issue.
I understand this version of Debian is not supported anymore, and this
will likely get no fix.
But I thought about reporting it to document it for others.
It is suppported by the Debian LTS team. The last upload of
2.5.1-3+deb11u3 was done by Daniel Leidert, copying him.
One immediate question, you said downgrading to -3 fixed it. However,
there were several versions in between, a -3+deb11u1 in March 2025 and a
-3+deb11u2 in August 2025. It would be good to know if this problem was
introduced in +deb11u3 just now.
Could you test downgrading to deb11u2?
Bernhard
