Release date:
2026-10-27 09:45:51 UTC
Description:
* SECURITY UPDATE: Remote denial of service via TLS retransmit timeout
integer overflow
- debian/patches/CVE-2026-84732.patch: cap the exponential backoff of
the reliable layer retransmit timeout, limit --tls-timeout and ignore
ACKs for packet IDs outside the send window in src/openvpn/options.c,
src/openvpn/reliable.c, src/openvpn/reliable.h
- CVE-2026-84732
Updated packages:
-
openvpn_2.4.7-1+deb10u1+tuxcare.els3_amd64.deb
sha:bb7a5626bdc5bd4a19a56dd1e52fe1f75e691ce3
-
openvpn_2.4.7-1+deb10u1+tuxcare.els3_arm64.deb
sha:a1439a92acd217d37ded6c8277ce005433237d3c
-
openvpn_2.4.7-1+deb10u1+tuxcare.els3_armel.deb
sha:3237a2efc0156b3e231c2302353fb48a0e7b0ee6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
