-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 22:20:55 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: mips64el
Version: 2.6.14-0+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-03) <buildd_mips64el-mipsel-osuosl-03@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-0+deb12u2) bookworm-security; urgency=high
 .
   * Cherry-pick upstream security patches from the 2.6.21 release
     - CVE-2026-12996: Fix use-after-free bug in ack_write_buf(), triggerable by
       a well-timed sequence of control channel + authentication packets
     - CVE-2026-13117: Fix use-after-free bug in tls_wrap_reneg(), triggerable
       by suitable sequence of dynamic tls-crypt control-channel packets
     - CVE-2026-13122: Fix server crash on reception of suitably malformed
       auth-token, if --auth-gen-token external-auth is active
     - CVE-2026-12932: Fix memory-leak in tls-crypt-v2 client key handling that
       could lead to out-of-memory situations and subsequent server crashes
     - CVE-2026-11771: Fix possible 1-byte buffer overrun on NTLMv2 proxy
       responses.
     - CVE-2026-13698: Fix another memory leak on reception of suitable
       tls-crypt-v2 packets that could lead to an out of memory situation and
       server crash
Checksums-Sha1:
 0330753d6c958bc3f2f4d14ccf96d46b6e19011e 1322716 openvpn-dbgsym_2.6.14-0+deb12u2_mips64el.deb
 1fd97ca568b4a57051fa2cca45d3c5f675d86280 7659 openvpn_2.6.14-0+deb12u2_mips64el-buildd.buildinfo
 2c24fbed76e86909c43a2e19c59b5ead4033c91b 632172 openvpn_2.6.14-0+deb12u2_mips64el.deb
Checksums-Sha256:
 259c3c9492b54e722357ce4db700108ec8b11403d18d13f97b9f278e7107f234 1322716 openvpn-dbgsym_2.6.14-0+deb12u2_mips64el.deb
 8b875a87ffb4262f59bca465ec6d306e5278c078ffbb5bc738ee939da1714a62 7659 openvpn_2.6.14-0+deb12u2_mips64el-buildd.buildinfo
 ee220c82de46ec0d8126b1a708db55007df33fa252cda26d9ce283abcdb024e8 632172 openvpn_2.6.14-0+deb12u2_mips64el.deb
Files:
 f675d04940c9afd01e7f5c37c0638655 1322716 debug optional openvpn-dbgsym_2.6.14-0+deb12u2_mips64el.deb
 f408d4148707fbec54b1cecf92018651 7659 net optional openvpn_2.6.14-0+deb12u2_mips64el-buildd.buildinfo
 b6cc082c0f9eefb40d795d8ae90a1deb 632172 net optional openvpn_2.6.14-0+deb12u2_mips64el.deb

-----BEGIN PGP SIGNATURE-----
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=e5Vr
-----END PGP SIGNATURE-----