On Fri, 3 Jul 2026 14:16:24 +0200 Bernhard Schmidt <[email protected]> wrote:
Hi Youri,
>
> Upgrading openvpn from 2.5.1-3 to 2.5.1-3+deb11u3 lead to segfault crashes.
> I'm seeing TLS timeouts too in the logs but I'm unsure if those are
> correlated.
>
> [Thu Jul 2 23:12:05 2026] openvpn[2387385]: segfault at 0 ip
> 000055f1ee7aec87 sp 00007ffc69242b50 error 4 in openvpn[55f1ee73d000+86000]
> [Thu Jul 2 23:12:05 2026] Code: f2 8b 05 3c 55 05 00 45 31 ed 85 c0 75
> 53 c7 43 08 00 00 00 00 48 c7 43 10 00 00 00 00 5b 41 5c 41 5d c3 48 8b
> 8e 18 05 00 00 <8b> 11 85 d2 7e ed 48 8b 49 70 45 31 e4 eb 13 66 2e 0f
> 1f 84 00 00
>
> Symbols are stripped in the binary so I could not get more information.
>
> Rolling back the openvpn version fixed the issue.
>
> I understand this version of Debian is not supported anymore, and this
> will likely get no fix.
> But I thought about reporting it to document it for others.
It is suppported by the Debian LTS team. The last upload of
2.5.1-3+deb11u3 was done by Daniel Leidert, copying him.
One immediate question, you said downgrading to -3 fixed it. However,
there were several versions in between, a -3+deb11u1 in March 2025 and a
-3+deb11u2 in August 2025. It would be good to know if this problem was
introduced in +deb11u3 just now.
Could you test downgrading to deb11u2?
That version can be found at
https://snapshot.debian.org/package/openvpn/2.5.1-3%2Bdeb11u2/
Cheers,
Emilio
