MGASA-2026-0126
- Source
- https://advisories.mageia.org/MGASA-2026-0126.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0126.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0126
- Upstream
- Published
- 2026-05-10T02:43:56Z
- Modified
- 2026-05-10T02:45:06.953244Z
- Summary
- Updated openvpn packages fix security vulnerabilities
- Details
-
CVE-2026-35058 - fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key CVE-2026-40215 - fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances
- References
-
- https://advisories.mageia.org/MGASA-2026-0126.html
- https://bugs.mageia.org/show_bug.cgi?id=35442
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFR4RR6F447AZK2ZTKVGZP3NKKWFW6DW/
- https://community.openvpn.net/Security%20Announcements/CVE-2026-35058
- https://community.openvpn.net/Security%20Announcements/CVE-2026-40215
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:9 / openvpn
Package
- Name
- openvpn
- Purl
- pkg:rpm/mageia/openvpn?arch=source&distro=mageia-9