[ubuntu/noble-proposed] openvpn 2.6.14-0ubuntu0.24.04.1 (Accepted)

[Lena Voytek]

openvpn (2.6.14-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream version 2.6.14 (LP: #2040467):
    - CVE Fixes:
      + CVE-2025-2704
    - Updates:
      + Send uname() release from client to server as IV_PLAT_VER.
      + Pass --timeout=0 argument to systemd-ask-password, to avoid default
        timeout of 90 seconds.
    - Bug Fixes:
      + Repair source IP selection for --multihome.
      + Allow tls-crypt-v2 to be setup only on initial packet of a session.
      + Fix some missing spaces in messages.
      + Fix parsing of usernames or passwords longer than USER_PASS_LEN on the
        server side to avoid IV variable misparsing and misleading errors.
      + Purge proxy authentication credentials from memory after use (if
        --auth-nocache is in use).
    - See https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn26 for
      additional bug fixes and information.
  * Remove patches fixed upstream:
    - d/p/CVE-2025-2704.patch
    [Fixed in 2.6.14]
  * d/t/control: Move to isolation-container to enable armhf/LXD coverage (LP 2104146).

Date: Fri, 30 May 2025 11:24:52 -0400
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openvpn/2.6.14-0ubuntu0.24.04.1
-------------- next part --------------
Format: 1.8
Date: Fri, 30 May 2025 11:24:52 -0400
Source: openvpn
Built-For-Profiles: noudeb
Architecture: source
Version: 2.6.14-0ubuntu0.24.04.1
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2040467
Changes:
 openvpn (2.6.14-0ubuntu0.24.04.1) noble; urgency=medium
 .
   * New upstream version 2.6.14 (LP: #2040467):
     - CVE Fixes:
       + CVE-2025-2704
     - Updates:
       + Send uname() release from client to server as IV_PLAT_VER.
       + Pass --timeout=0 argument to systemd-ask-password, to avoid default
         timeout of 90 seconds.
     - Bug Fixes:
       + Repair source IP selection for --multihome.
       + Allow tls-crypt-v2 to be setup only on initial packet of a session.
       + Fix some missing spaces in messages.
       + Fix parsing of usernames or passwords longer than USER_PASS_LEN on the
         server side to avoid IV variable misparsing and misleading errors.
       + Purge proxy authentication credentials from memory after use (if
         --auth-nocache is in use).
     - See https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn26 for
       additional bug fixes and information.
   * Remove patches fixed upstream:
     - d/p/CVE-2025-2704.patch
     [Fixed in 2.6.14]
   * d/t/control: Move to isolation-container to enable armhf/LXD coverage (LP 2104146).
Checksums-Sha1:
 137d25809e6c486535d70b4402852ee5429c922a 2366 openvpn_2.6.14-0ubuntu0.24.04.1.dsc
 cfca54fd0f3e3a06565cf4fec982d724b5e5c188 1926343 openvpn_2.6.14.orig.tar.gz
 99d5b8fd5d847aa592717427e3ff4ff446047f77 65348 openvpn_2.6.14-0ubuntu0.24.04.1.debian.tar.xz
 6db304c0ea0069a14280d487de6437d393f97ef4 8134 openvpn_2.6.14-0ubuntu0.24.04.1_source.buildinfo
Checksums-Sha256:
 707e75e2c7cff0e26235d0f66d65a57b261f6eb5b7840fd20f6b0b147fd0c590 2366 openvpn_2.6.14-0ubuntu0.24.04.1.dsc
 9eb6a6618352f9e7b771a9d38ae1631b5edfeed6d40233e243e602ddf2195e7a 1926343 openvpn_2.6.14.orig.tar.gz
 ae646d6400fd69e26d1bc9d305188ab72b42296c06463f1d546dd90393e66194 65348 openvpn_2.6.14-0ubuntu0.24.04.1.debian.tar.xz
 7f3d80410ed2bd5ab861ab3f6c21249dc724c7043286cfed47b3394b55b0b45b 8134 openvpn_2.6.14-0ubuntu0.24.04.1_source.buildinfo
Files:
 50e1eee1cdcbd9597bd54e6156bfb41a 2366 net optional openvpn_2.6.14-0ubuntu0.24.04.1.dsc
 20f7324bd5fdf7121d0f7b40a2c2b975 1926343 net optional openvpn_2.6.14.orig.tar.gz
 928e01d342ccce513debbfe987484585 65348 net optional openvpn_2.6.14-0ubuntu0.24.04.1.debian.tar.xz
 cb3934ab0749cff7564d8f1bf2bf7bae 8134 net optional openvpn_2.6.14-0ubuntu0.24.04.1_source.buildinfo
Original-Maintainer: Bernhard Schmidt <berni at debian.org>
Vcs-Git: https://git.launchpad.net/~lvoytek/ubuntu/+source/openvpn
Vcs-Git-Commit: d7ac93f8e1cbc059a5a7480b6e8c9656be250e31
Vcs-Git-Ref: refs/heads/backport-2.6.14-noble