-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 01 Jul 2026 21:46:02 +0200 Source: openvpn Architecture: source Version: 2.7.5-1 Distribution: unstable Urgency: high Maintainer: OpenVPN Maintainers <[email protected]> Changed-By: Bernhard Schmidt <[email protected]> Changes: openvpn (2.7.5-1) unstable; urgency=high . [ Bernhard Schmidt ] * New upstream version 2.7.5 - CVE-2026-12996: Fix use-after-free bug in ack_write_buf(), triggerable by a well-timed sequence of control channel + authentication packets - CVE-2026-12117: Fix use-after-free bug in tls_wrap_reneg(), triggerable by suitable sequence of dynamic tls-crypt control-channel packets - CVE-2026-13122: Fix server crash on reception of suitably malformed auth-token, if --auth-gen-token external-auth is active - CVE-2026-12932: Fix memory-leak in tls-crypt-v2 client key handling that could lead to out-of-memory situations and subsequent server crashes - CVE-2026-11771: Fix possible 1-byte buffer overrun on NTLMv2 proxy responses - CVE-2026-13698: Fix another memory leak on reception of suitable tls-crypt-v2 packets that could lead to an out of memory situation and server crash . [ Gianfranco Costamagna ] * Fixup test for new release . [ Marc Haber ] * split Build-Depends into Build-Depends-Arch Checksums-Sha1: daa970716326b8baca1bcca1622505566872a8dc 2357 openvpn_2.7.5-1.dsc 4fe6ddaab159acd8dde7fef64b17e14a18db7ea2 2101063 openvpn_2.7.5.orig.tar.gz c5e4e0806bb470ab57ddf7a2f7b6fe92db6240b1 61700 openvpn_2.7.5-1.debian.tar.xz 7852f0acac5edaa8ccc49abf4216ed1ecf8f418e 7270 openvpn_2.7.5-1_amd64.buildinfo Checksums-Sha256: 2e82fe29c0cad73f9110e09b9c4b348da8912d90873d35d20541f4dd0f14defb 2357 openvpn_2.7.5-1.dsc c6864b3c7d4e059c7d6ce22d1b5fa646c8b379a06af872eeb9792b6083a44ac4 2101063 openvpn_2.7.5.orig.tar.gz ef59ab320c2b8605d320aed5dbecc6f72f56afcb3595ba518e45f5df942c7f17 61700 openvpn_2.7.5-1.debian.tar.xz 1a49af725a2fbe934cf75dffdd8f4f9c42934d6423d205ff9654dbe9becb1059 7270 openvpn_2.7.5-1_amd64.buildinfo Files: 677d7a39eee96a196f907abe890ae0b6 2357 net optional openvpn_2.7.5-1.dsc 163f1c2c946b32d15c9971219a5bff45 2101063 net optional openvpn_2.7.5.orig.tar.gz 87a0a70504f44387d02fff2641fc2bce 61700 net optional openvpn_2.7.5-1.debian.tar.xz 2ba2e9bd527caf3c967cfb9875e402da 7270 net optional openvpn_2.7.5-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEE1uAexRal3873GVbTd1B55bhQvJMFAmpFc2gRHGJlcm5pQGRl Ymlhbi5vcmcACgkQd1B55bhQvJNvQhAAgHzjts8EjyApIxal2s3K8gr8UNRJo+DG 5dCPNHTrdfxqJrgRWi/he2dTo7B3gx5942ALRTY+c6N5cr5Bu71wOJujIlgksNRD Z52wzeOWMA6dOkMBzcWY+NzgzB5DHfaBcTcvDoSJrs0bA45jIkeLa3tlnS7QTPSZ 3d3gN7Avm8EAHVlIhviuoHvnrT1w6vtcBR3f4Bp2izx95AMsrDIeQE3L6o7Zyrx/ Bs5dNzynLhowrz406vrxLZj3iAu4EimJK/eyi8fYKno05kg/DeIlg2N1aQeeLi3z 8r6duyV5P7S26TftxX2wyDr1Xkqt3d49r0XAho5JTONlmxvVDmxFXxY8baQBpgJV L87GY2UkyMdqtSp3VRTfkL+ugQO1f6fLFIjvcx8D1ikvrQL9aClyhzRX/CC6VSM2 zpLrEL9K3Lzb9AfDCpdTbWNE8JfHUu81jyuqYKot1o+R+rcr1SJJLL9MG8d52MrU 4fZdBc5zJUnFYmxgSydNfIQ/QxYKE9hd6H6V06537vKjxW981CuZZ0sjjalPgcUs xVuLUG7dNuQtLou0N+r5xydr/ZPOV+7pQDS+J4rBlw8UKNvYojtnbya0sMmbTYRv jkGQHG+sTylkjJBvogU4G02wDF8pq4/58yhSbgBoRPyn5qw/X5GMsq8RLR9OJ1L+ R1QnDEn7y1w= =ZAPm -----END PGP SIGNATURE-----
pgpWWizYW5Uk0.pgp
Description: PGP signature
