CLSA-2026-1790268971

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790268971.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1790268971
Published
2026-09-24T16:56:20Z
Modified
2026-10-26T09:31:51Z
Summary
Update of openvpn
Details
  • re-import the vendor's 2.4.12-2.el8
  • ExcludeArch: i686 -- EPEL 8 publishes no i386 tree, so the buildroot for that architecture cannot be assembled; we have never shipped an i686 build here
  • skip the loopback TLS test while the tarball's sample certificates are expired (they lapsed on 2024-10-19); the handshake cannot complete and the test hung every build to the 12 h rpmbuild limit
References

Affected packages

TuxCare:CentOS:8.5 / openvpn

Package

Name
openvpn
Purl
pkg:rpm/tuxcare/openvpn?distro=centos-8.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.12-2.el8.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790268971.json"

TuxCare:CentOS:8.5 / openvpn-devel

Package

Name
openvpn-devel
Purl
pkg:rpm/tuxcare/openvpn-devel?distro=centos-8.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.12-2.el8.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1790268971.json"