Back Linuxsecurity

Debian OpenVPN Key Denial of Service Advisory DSA-6376-1 CVE-2026

Linuxsecurity •LinuxSecurity Advisories • July 3, 2026

For the stable distribution (trixie), these problems have been fixed in version 2.6.14-1+deb13u3. We recommend that you upgrade your openvpn packages. For the detailed security status of openvpn please refer to its security tracker page at: Further information Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at:

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Debian OpenVPN Security Updates Address Critical Vulnerabilities Debian has released security updates for OpenVPN addressing significant vulnerabilities in versions 2.5.1 and 2.6.14. The updates fix a segmentation fault issue and a key denial of service vulnerability, respectively. Users of Debian 11 (bullseye) should upgrade to version 2.5.1-3+deb11u4, while users of the stable distribution (trixie) need to update to version 2.6.14-1+deb13u3. These vulnerabilities could potentially allow attackers to disrupt service or exploit the OpenVPN service. Debian recommends immediate upgrades to mitigate these risks. The security status of OpenVPN can be tracked on the Debian security tracker page. 2 sources 61

Debian OpenVPN Key Denial of Service Advisory DSA-6376-1 CVE-2026

The full story

Extracted Entities

Attack Types (1)

Platforms (2)