Debian alert DLA-4666-1 (openvpn)

From:
             
 
Utkarsh Gupta <utkarsh@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4666-1] openvpn security update
Date:
             
 
Sat, 04 Jul 2026 02:50:27 +0530
Message-ID:
             
 
<CAPP0f97Zg55eBg8mdUYiYfH5tBEqGRwv4tKMQ7mQe4t-HQZz3w@mail.gmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -----------------------------------------------------------------------
Debian LTS Advisory DLA-4666-1              debian-lts@lists.debian.org
https://www.debian.org/lts/security/                      Utkarsh Gupta
July 04, 2026                               https://wiki.debian.org/LTS
- -----------------------------------------------------------------------

Package        : openvpn
Version        : 2.6.14-0+deb12u2
CVE ID         : CVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117
                 CVE-2026-13122 CVE-2026-13698

Multiple security vulnerabilities were discovered in OpenVPN, which
could result in denial of service.

For Debian 12 bookworm, these problems have been fixed in version
2.6.14-0+deb12u2.

We recommend that you upgrade your openvpn packages.

For the detailed security status of openvpn please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openvpn

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=MhJ3
-----END PGP SIGNATURE-----