-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 09:22:24 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: riscv64
Version: 2.6.14-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-manda-02) <buildd_riscv64-rv-manda-02@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-1+deb13u2) trixie-security; urgency=medium
 .
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
Checksums-Sha1:
 30b68f5aea22b2f38896447b5996b780d4854f7e 1191824 openvpn-dbgsym_2.6.14-1+deb13u2_riscv64.deb
 615e8981486e398f6557c99cbf1259314c3f1f5f 7149 openvpn_2.6.14-1+deb13u2_riscv64-buildd.buildinfo
 7be1de55a9266613aa796f1fe0f0f036522ac42d 669768 openvpn_2.6.14-1+deb13u2_riscv64.deb
Checksums-Sha256:
 8dac75def867b8b1a6e7245ecbf1d6b3137362defaefef3c1df9b02b86e4d379 1191824 openvpn-dbgsym_2.6.14-1+deb13u2_riscv64.deb
 a45aa6b4f16e54aff5b950a19cd8e04941d667638029680bda60d388102b347e 7149 openvpn_2.6.14-1+deb13u2_riscv64-buildd.buildinfo
 92a4bf981d2b92f26efb7dcc6d0d2a9b55d64ade06110390ae47bf76f3983778 669768 openvpn_2.6.14-1+deb13u2_riscv64.deb
Files:
 d1e49b020f69f504ecfc8c772abd637e 1191824 debug optional openvpn-dbgsym_2.6.14-1+deb13u2_riscv64.deb
 f4e36d6803f423b8aedae2758b84955b 7149 net optional openvpn_2.6.14-1+deb13u2_riscv64-buildd.buildinfo
 4423e832ffa5f92b07fed79a0274f0b7 669768 net optional openvpn_2.6.14-1+deb13u2_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=VDZN
-----END PGP SIGNATURE-----