[CLSA-2026:1794232797] Fix CVE(s): CVE-2026-84471
Type:
security
Severity:
Important
Release date:
2026-11-09 14:00:08 UTC
Description:
* SECURITY UPDATE: double free of a TLS session buffer in lame duck handling - debian/patches/CVE-2026-84471.patch: move the check_session_buf_not_used() guard into the functions that free session and key state buffers, so every free path is covered - CVE-2026-84471
CVEs fixed:
Updated packages:
  • openvpn_2.4.7-1+deb10u1+tuxcare.els5_amd64.deb
    sha:f1a3a1dfc77002c76a818007535e5fe51515939d
  • openvpn_2.4.7-1+deb10u1+tuxcare.els5_arm64.deb
    sha:e4ec828d9243013c7012da17e897aedbf6e03dc7
  • openvpn_2.4.7-1+deb10u1+tuxcare.els5_armel.deb
    sha:35d8e8eb348fe5013e93af0e063d610e7a50b404
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.