Ubuntu alert USN-8852-1 (openvpn)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8852-1] OpenVPN vulnerabilities
Date:
             
 
Wed, 30 Sep 2026 14:19:14 +0000
Message-ID:
             
 
<E1xBv9O-00061I-Ad@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8852-1
September 30, 2026

openvpn vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in OpenVPN.

Software Description:
- openvpn: virtual private network software

Details:

It was discovered that OpenVPN had a use-after-free vulnerability in
its TLS session handling. An attacker could possibly use this issue
to cause OpenVPN to crash, resulting in a denial of service, or
execute arbitrary code. (CVE-2026-84471)

It was discovered that OpenVPN incorrectly handled retransmissions of
ACK packet IDs, which could trigger a timeout integer overflow. A
remote attacker could possibly use this issue to cause a denial of
service. (CVE-2026-84732)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  openvpn                         2.7.0-1ubuntu1.3

Ubuntu 24.04 LTS
  openvpn                         2.6.19-0ubuntu0.24.04.4

Ubuntu 22.04 LTS
  openvpn                         2.5.11-0ubuntu0.22.04.5

After a standard system update you need to restart OpenVPN to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8852-1
  CVE-2026-84471, CVE-2026-84732

Package Information:
  https://launchpad.net/ubuntu/+source/openvpn/2.7.0-1ubunt...
  https://launchpad.net/ubuntu/+source/openvpn/2.6.19-0ubun...
  https://launchpad.net/ubuntu/+source/openvpn/2.5.11-0ubun...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=wykX
-----END PGP SIGNATURE-----