-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 22:20:55 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: mipsel
Version: 2.6.14-0+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: mipsel Build Daemon (mipsel-osuosl-04) <buildd_mips64el-mipsel-osuosl-04@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-0+deb12u2) bookworm-security; urgency=high
 .
   * Cherry-pick upstream security patches from the 2.6.21 release
     - CVE-2026-12996: Fix use-after-free bug in ack_write_buf(), triggerable by
       a well-timed sequence of control channel + authentication packets
     - CVE-2026-13117: Fix use-after-free bug in tls_wrap_reneg(), triggerable
       by suitable sequence of dynamic tls-crypt control-channel packets
     - CVE-2026-13122: Fix server crash on reception of suitably malformed
       auth-token, if --auth-gen-token external-auth is active
     - CVE-2026-12932: Fix memory-leak in tls-crypt-v2 client key handling that
       could lead to out-of-memory situations and subsequent server crashes
     - CVE-2026-11771: Fix possible 1-byte buffer overrun on NTLMv2 proxy
       responses.
     - CVE-2026-13698: Fix another memory leak on reception of suitable
       tls-crypt-v2 packets that could lead to an out of memory situation and
       server crash
Checksums-Sha1:
 a30dca19aa02f82b891d264441f205f21972e226 1295212 openvpn-dbgsym_2.6.14-0+deb12u2_mipsel.deb
 488024c57f3cab03c69ab0b4e9a3956c31ae23bf 7636 openvpn_2.6.14-0+deb12u2_mipsel-buildd.buildinfo
 d710fb47829808876394906bac0bd7323ba49613 631544 openvpn_2.6.14-0+deb12u2_mipsel.deb
Checksums-Sha256:
 5979030fd697addfd40e90a48b2cfbba7fda56998289ec9701ad3258bfbb61e2 1295212 openvpn-dbgsym_2.6.14-0+deb12u2_mipsel.deb
 6e67a2f297bfa42fd37e613039f5bba566a29ddd0cd1023d04996247e7ae084e 7636 openvpn_2.6.14-0+deb12u2_mipsel-buildd.buildinfo
 dad248f377e3bf6e7fef3604fb360a286262fa51b1fc34c6d9e5da0c401c8c07 631544 openvpn_2.6.14-0+deb12u2_mipsel.deb
Files:
 624680a6fdcf48798cff8ebfda658673 1295212 debug optional openvpn-dbgsym_2.6.14-0+deb12u2_mipsel.deb
 99a22bfebc6867029b49bdae38cf4b08 7636 net optional openvpn_2.6.14-0+deb12u2_mipsel-buildd.buildinfo
 21b8ed0ca5d4ef6fa04468f9938afaf3 631544 net optional openvpn_2.6.14-0+deb12u2_mipsel.deb

-----BEGIN PGP SIGNATURE-----
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=94Mq
-----END PGP SIGNATURE-----