gpp_maybe Security update for openvpn

SUSE-SLE-Module-Basesystem-15-SP7-2026-3596

This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126). - CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127). - CVE-2026-12996: potential DoS and memory leak via TLS session use-after-free (bsc#1273128). - CVE-2026-13117: heap use-after-free via incomplete guard in check_session_buf_not_used() (bsc#1273129). - CVE-2026-13379: Windows interactive service DNS SearchList state pollution (bsc#1273130). - CVE-2026-35058: improper validation of packet length can lead to a denial of service (bsc#1267945). - CVE-2026-40215: race condition during TLS session promotion can lead to a use-after-free (bsc#1267944).

• Release Date
  Aug 12 2026
• References
  Bugzilla: 1267944, 1267945, 1273126, 1273127, 1273128, 1273129, 1273130
  CVEs: CVE-2026-11771, CVE-2026-12932, CVE-2026-12996, CVE-2026-13117, CVE-2026-13379, CVE-2026-35058, CVE-2026-40215
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 s390x

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.6.10-150600.3.26.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.6.10-150600.3.26.1 lock rpm

  openvpn-dco
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.6.10-150600.3.26.1 lock rpm lock src

  openvpn-dco-devel
  OpenVPN plugin header

  2.6.10-150600.3.26.1 lock rpm

  openvpn-devel
  OpenVPN plugin header

  2.6.10-150600.3.26.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.6.10-150600.3.26.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.6.10-150600.3.26.1 lock rpm

  openvpn-dco
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.6.10-150600.3.26.1 lock rpm lock src

  openvpn-dco-devel
  OpenVPN plugin header

  2.6.10-150600.3.26.1 lock rpm

  openvpn-devel
  OpenVPN plugin header

  2.6.10-150600.3.26.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.6.10-150600.3.26.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.6.10-150600.3.26.1 lock rpm

  openvpn-dco
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.6.10-150600.3.26.1 lock rpm lock src

  openvpn-dco-devel
  OpenVPN plugin header

  2.6.10-150600.3.26.1 lock rpm

  openvpn-devel
  OpenVPN plugin header

  2.6.10-150600.3.26.1 lock rpm

Basesystem Module 15.7 x86_64

• Packages
  openvpn
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.6.10-150600.3.26.1 lock rpm lock src

  openvpn-auth-pam-plugin
  OpenVPN auth-pam plugin

  2.6.10-150600.3.26.1 lock rpm

  openvpn-dco
  Full-featured SSL VPN solution using a TUN/TAP Interface

  2.6.10-150600.3.26.1 lock rpm lock src

  openvpn-dco-devel
  OpenVPN plugin header

  2.6.10-150600.3.26.1 lock rpm

  openvpn-devel
  OpenVPN plugin header

  2.6.10-150600.3.26.1 lock rpm