-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 09:22:24 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: arm64
Version: 2.6.14-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-1+deb13u2) trixie-security; urgency=medium
 .
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
Checksums-Sha1:
 5f1edc8bc1d4267f95524d30bebeccaaa7c42cf7 1254532 openvpn-dbgsym_2.6.14-1+deb13u2_arm64.deb
 b7008079526dac019192ec396b834cb2e0b22aa4 7189 openvpn_2.6.14-1+deb13u2_arm64-buildd.buildinfo
 6c43b46c09b9dd2fe3fa078b826ac208c1f1c56e 629048 openvpn_2.6.14-1+deb13u2_arm64.deb
Checksums-Sha256:
 59b3eafc42405fa8e9a6f69ae1c42e872d064324b970622deb300e277ef766d2 1254532 openvpn-dbgsym_2.6.14-1+deb13u2_arm64.deb
 99711fb7a31a0f9a7761dd2f95c8f8aaec71fde7fc34120f3cd54d4f9bf01e00 7189 openvpn_2.6.14-1+deb13u2_arm64-buildd.buildinfo
 510c9d9464e1c119e7cb6e21dc680e7cdaf6801d4300a432705346d20b79c98f 629048 openvpn_2.6.14-1+deb13u2_arm64.deb
Files:
 e497e894649068de43fed50b50c10a20 1254532 debug optional openvpn-dbgsym_2.6.14-1+deb13u2_arm64.deb
 7b51e8b396b15155170082dbcfa66fc8 7189 net optional openvpn_2.6.14-1+deb13u2_arm64-buildd.buildinfo
 152c01520d429381a245154025fa727c 629048 net optional openvpn_2.6.14-1+deb13u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=TGgX
-----END PGP SIGNATURE-----