Hi, Unfortunately, this issue was not visible in test environments, and I don't have a reproducer for now, so testing will be a bit difficult in my situation. I still tried a short test for 30m, using deb11u2. I didn't observe crashes, but this was just for a short period of time.
Regards, Youri Enphase Confidential ________________________________ From: Emilio Pozuelo Monfort <[email protected]> on behalf of Emilio Pozuelo Monfort <[email protected]> Sent: Saturday, July 4, 2026 3:41 AM To: [email protected] <[email protected]> Cc: Bernhard Schmidt <[email protected]>; Youri Bonnaffe <[email protected]>; Daniel Leidert <[email protected]> Subject: Re: Bug#1141326: openvpn: Segfault after 2.5.1-3+deb11u3 upgrade On Fri, 3 Jul 2026 14: 16: 24 +0200 Bernhard Schmidt <berni@ debian. org> wrote: > Hi Youri, > > > > Upgrading openvpn from 2. 5. 1-3 to 2. 5. 1-3+deb11u3 lead to segfault crashes. > > I'm seeing TLS timeouts too in the logs ZjQcmQRYFpfptBannerStart This Message Is From an Untrusted Sender You have not previously corresponded with this sender. If suspicious report to [email protected] ZjQcmQRYFpfptBannerEnd On Fri, 3 Jul 2026 14:16:24 +0200 Bernhard Schmidt <[email protected]> wrote: > Hi Youri, > > > > Upgrading openvpn from 2.5.1-3 to 2.5.1-3+deb11u3 lead to segfault crashes. > > I'm seeing TLS timeouts too in the logs but I'm unsure if those are > > correlated. > > > > [Thu Jul 2 23:12:05 2026] openvpn[2387385]: segfault at 0 ip > > 000055f1ee7aec87 sp 00007ffc69242b50 error 4 in openvpn[55f1ee73d000+86000] > > [Thu Jul 2 23:12:05 2026] Code: f2 8b 05 3c 55 05 00 45 31 ed 85 c0 75 > > 53 c7 43 08 00 00 00 00 48 c7 43 10 00 00 00 00 5b 41 5c 41 5d c3 48 8b > > 8e 18 05 00 00 <8b> 11 85 d2 7e ed 48 8b 49 70 45 31 e4 eb 13 66 2e 0f > > 1f 84 00 00 > > > > Symbols are stripped in the binary so I could not get more information. > > > > Rolling back the openvpn version fixed the issue. > > > > I understand this version of Debian is not supported anymore, and this > > will likely get no fix. > > But I thought about reporting it to document it for others. > > It is suppported by the Debian LTS team. The last upload of > 2.5.1-3+deb11u3 was done by Daniel Leidert, copying him. > > One immediate question, you said downgrading to -3 fixed it. However, > there were several versions in between, a -3+deb11u1 in March 2025 and a > -3+deb11u2 in August 2025. It would be good to know if this problem was > introduced in +deb11u3 just now. > > Could you test downgrading to deb11u2? That version can be found at https://urldefense.com/v3/__https://snapshot.debian.org/package/openvpn/2.5.1-3*2Bdeb11u2/__;JQ!!J0D89H32QIeNiQ!yJJ5T12YZX1BoDLFoN8NC09DlaTFNm31pUcEVTdrccp4oCAYwfffdnDLqKFgJiEH6G96ZXDM_JMkrRYKBqER$ Cheers, Emilio
