-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 09:22:24 +0200
Source: openvpn
Binary: openvpn openvpn-dbgsym
Architecture: ppc64el
Version: 2.6.14-1+deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Bernhard Schmidt <berni@debian.org>
Description:
 openvpn    - virtual private network daemon
Changes:
 openvpn (2.6.14-1+deb13u2) trixie-security; urgency=medium
 .
   * Cherry-pick upstream security patches
     - CVE-2026-40215: fix race condition in TLS handshake that could lead to
       leaking of packet data from a previous handshake under specific
       circumstances
     - CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed
       packet with a valid tls-crypt-v2 key
Checksums-Sha1:
 6f483d1bad9918950824e2a5d2c510d31dcceaaa 1325588 openvpn-dbgsym_2.6.14-1+deb13u2_ppc64el.deb
 de46115aa6ef986196b74380946460060800887e 7204 openvpn_2.6.14-1+deb13u2_ppc64el-buildd.buildinfo
 2b404715be12d13a4ebb31b37393ed3b9328ae9e 687876 openvpn_2.6.14-1+deb13u2_ppc64el.deb
Checksums-Sha256:
 34d654ee15018c7f55344f9bb4ee835aca6227cfab2b16e0d3b169b2a6ed8371 1325588 openvpn-dbgsym_2.6.14-1+deb13u2_ppc64el.deb
 9762ad3e2b0edcefbce05148c54c6ddc07895a125c2e05b8d5daf1515c8a6153 7204 openvpn_2.6.14-1+deb13u2_ppc64el-buildd.buildinfo
 af974d85fe578d26f0571ed2dd1e784fc021eeecb4915ba5ae29957138374a06 687876 openvpn_2.6.14-1+deb13u2_ppc64el.deb
Files:
 40294a173c6a61818051dcc0e287f001 1325588 debug optional openvpn-dbgsym_2.6.14-1+deb13u2_ppc64el.deb
 853a720a51d9f7e4ec7303ff9d594dcc 7204 net optional openvpn_2.6.14-1+deb13u2_ppc64el-buildd.buildinfo
 8f6c6ba7dcf1aea7e4e9878c63c42d7a 687876 net optional openvpn_2.6.14-1+deb13u2_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=cH9+
-----END PGP SIGNATURE-----