Public bug reported:
A new release of openvpn is available for merging from Debian.
Ubuntu: 2.7.7-1ubuntu1
Debian Unstable: 2.7.8-1
### New Debian Changes ###
openvpn (2.7.8-1) unstable; urgency=high
* New upstream version 2.7.8
- CVE-2026-84790: Check for NULL-Bytes in certificate subjects - refuse all
such certificates now as "invalid"
- CVE-2026-88964: options: fix unsigned underflow when clearing
domain_search_list
- fixes various DCO-related race conditions
* tests: Use isolation-machine, add iproute2 dependency (Closes: #1144822)
-- Bernhard Schmidt <[email protected]> Wed, 07 Oct 2026 20:53:54 +0200
### Old Ubuntu Delta ###
openvpn (2.7.7-1ubuntu1) stonking; urgency=low
* Merge from Debian unstable. Remaining changes:
- d/control: Demote easy-rsa to Suggests (universe package).
- debian/[email protected]: Add '--script-security 2' similar to what
got added to debian/openvpn.init.d ages ago (LP #1454725)
-- Gianfranco Costamagna <[email protected]> Thu, 01 Oct 2026
14:35:19 +0200
** Affects: openvpn (Ubuntu)
Importance: Wishlist
Status: New
** Tags: needs-merge upgrade-software-version
** Changed in: openvpn (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: openvpn (Ubuntu)
Milestone: None => ubuntu-26.11
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2171148
Title:
Merge openvpn 2.7.8-1 from Debian for tenacious cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/2171148/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
