-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 05 May 2026 22:20:39 +0200
Source: openvpn
Architecture: source
Version: 2.6.14-0+deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: Bernhard Schmidt <berni@debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Closes: 1074504
Changes:
 openvpn (2.6.14-0+deb12u1) bookworm-security; urgency=medium
 .
   [ Bernhard Schmidt ]
   * Import upstream version 2.6.14 from debian/trixie stable branch
     - Drop patches superseded by new upstream version
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
   * d/openvpn@.service: Add CAP_SETPCAP required for openvpn-dco-dkms
     (Closes: #1074504)
   * Remove superfluous entries in d/copyright
 .
   [ Remus-Gabriel Chelu ]
   * Add Romanian templates translation
Checksums-Sha1:
 335308f861f6df5cd5fcb3df31bdc96048f74844 2271 openvpn_2.6.14-0+deb12u1.dsc
 cfca54fd0f3e3a06565cf4fec982d724b5e5c188 1926343 openvpn_2.6.14.orig.tar.gz
 277e45a3aab3529ad71c208a52ecb2035373412d 66360 openvpn_2.6.14-0+deb12u1.debian.tar.xz
 ee68b695c86ab2eea6550bc2a62f293d310f9014 8305 openvpn_2.6.14-0+deb12u1_amd64.buildinfo
Checksums-Sha256:
 847eaa86e07b3abb4ca3fa81c85ab362022e4508d602c2ac9a4ef853bfdebaaa 2271 openvpn_2.6.14-0+deb12u1.dsc
 9eb6a6618352f9e7b771a9d38ae1631b5edfeed6d40233e243e602ddf2195e7a 1926343 openvpn_2.6.14.orig.tar.gz
 b6ec5c4a4baed23d5eb7566064bb9bbf2c2f4e4b6bab0ef9b0a70d93983ba55a 66360 openvpn_2.6.14-0+deb12u1.debian.tar.xz
 c8ad4fd4bb663b7d76176a5e100d08b5f7632537b78879b4376c7c90cb9292b8 8305 openvpn_2.6.14-0+deb12u1_amd64.buildinfo
Files:
 39ea0cee35dc800f6620bceb6c4fb308 2271 net optional openvpn_2.6.14-0+deb12u1.dsc
 20f7324bd5fdf7121d0f7b40a2c2b975 1926343 net optional openvpn_2.6.14.orig.tar.gz
 7226dd08aaa2a6ed44a4d62277a18536 66360 net optional openvpn_2.6.14-0+deb12u1.debian.tar.xz
 f62ff9e2e87a96c1c4ba8507ca4ce4b7 8305 net optional openvpn_2.6.14-0+deb12u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=A0rx
-----END PGP SIGNATURE-----