-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 09:22:24 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: armhf
Version: 2.6.14-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-1+deb13u2) trixie-security; urgency=medium
 .
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
Checksums-Sha1:
 973a0f313b950d66ae7c4399f7ddd875e913588b 1256460 openvpn-dbgsym_2.6.14-1+deb13u2_armhf.deb
 bcd81f006ed343680e4cc5ff601bc9421b96ed06 7071 openvpn_2.6.14-1+deb13u2_armhf-buildd.buildinfo
 47a5eb5c7471a5e113765655b77d7c82d9fda34f 616560 openvpn_2.6.14-1+deb13u2_armhf.deb
Checksums-Sha256:
 40299f2cacd736696d127c360003d0303313bcb69f2bba2850aa3426d61a4aed 1256460 openvpn-dbgsym_2.6.14-1+deb13u2_armhf.deb
 cbbe5102c9eead536c2b912c0ab93fa47c69555adf52b0de95904e6646908a77 7071 openvpn_2.6.14-1+deb13u2_armhf-buildd.buildinfo
 91483c5fff06cba4762ac37ffa3c259280bd54380b5ef453c5c9b77fac0611db 616560 openvpn_2.6.14-1+deb13u2_armhf.deb
Files:
 909fe8eb55f1d2586677048f122a007a 1256460 debug optional openvpn-dbgsym_2.6.14-1+deb13u2_armhf.deb
 0999bd3615e818df750de054a6b11356 7071 net optional openvpn_2.6.14-1+deb13u2_armhf-buildd.buildinfo
 7178eef163a293d0018c5beabfeae89e 616560 net optional openvpn_2.6.14-1+deb13u2_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=DsQ7
-----END PGP SIGNATURE-----