Advisories » MGASA-2026-0498

Updated openvpn package fixes security vulnerabilities

Publication date: 13 Oct 2026
Modification date: 13 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-84471 , CVE-2026-84732

Description

Improve on check_session_buf_not_used(), catch possible double-free in
the lame duck case. (CVE-2026-84471)
Reliability layer: avoid unbounded reliable TLS timeout, and ignore acks
for packets that cannot be outstanding. (CVE-2026-84732)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36429
• https://ubuntu.com/security/notices/USN-8852-1
• https://github.com/OpenVPN/openvpn/releases/tag/v2.6.23
• https://www.cve.org/CVERecord?id=CVE-2026-84471
• https://www.cve.org/CVERecord?id=CVE-2026-84732

SRPMS

10/core

• openvpn-2.6.23-1.mga10