[CLSA-2026:1793932988] Fix CVE(s): CVE-2026-84471
Type:
security
Severity:
Important
Release date:
2026-11-06 02:43:19 UTC
Description:
* SECURITY UPDATE: double free of a TLS session buffer in lame duck handling - debian/patches/CVE-2026-84471.patch: move the check_session_buf_not_used() guard into the functions that free session and key state buffers, so every free path is covered - CVE-2026-84471
CVEs fixed:
Updated packages:
  • openvpn_2.5.1-3+deb11u4+tuxcare.els4_amd64.deb
    sha:915276e051ac40b543970e2dc51481e3664b88f0
  • openvpn_2.5.1-3+deb11u4+tuxcare.els4_arm64.deb
    sha:7b28533db2122b6035d318e76fe20705576b4659
  • openvpn_2.5.1-3+deb11u4+tuxcare.els4_armel.deb
    sha:f9b08427cc2407950ffa90de1cbb3e39a3b379f4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.