SECURITY UPDATE: Remote denial of service via TLS retransmit timeout
integer overflow
debian/patches/CVE-2026-84732.patch: cap the exponential backoff of
the reliable layer retransmit timeout, limit --tls-timeout and ignore
ACKs for packet IDs outside the send window in src/openvpn/options.c,
src/openvpn/reliable.c, src/openvpn/reliable.h
CVE-2026-84732
UPDATE CERTIFICATES: Renew sample keys
debian/patches/sample-keys-renew.patch: Renew sample keys for 10 years