Release date:
2026-10-22 06:08:13 UTC
Description:
* SECURITY UPDATE: Remote denial of service via TLS retransmit timeout
integer overflow
- debian/patches/CVE-2026-84732.patch: cap the exponential backoff of
the reliable layer retransmit timeout, limit --tls-timeout and ignore
ACKs for packet IDs outside the send window in src/openvpn/options.c,
src/openvpn/reliable.c, src/openvpn/reliable.h
- CVE-2026-84732
* UPDATE CERTIFICATES: Renew sample keys
- debian/patches/sample-keys-renew.patch: Renew sample keys for 10 years
Updated packages:
-
openvpn_2.4.12-0ubuntu0.20.04.2+tuxcare.els1_amd64.deb
sha:aeb87bd03f918f5d1bb9983e3bfd8256cfd0f8b5
-
openvpn_2.4.12-0ubuntu0.20.04.2+tuxcare.els1_arm64.deb
sha:932131b3a8726193c08ad55e55aa725ea4425f16
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
