{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "OpenVPN: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/openvpn--openvpn/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/openvpn--openvpn/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84471/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84471/",
   "title": "CVE-2026-84471 disclosed",
   "content_text": "The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry.",
   "date_published": "2026-10-14T14:29:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84471/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84471/",
   "title": "CVE-2026-84471 fixed in Debian:14",
   "content_text": "Fixed versions: openvpn 2.7.7-1.",
   "date_published": "2026-10-14T14:29:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84471/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84471/",
   "title": "CVE-2026-84471 fixed in Ubuntu:22.04:LTS",
   "content_text": "Fixed versions: openvpn 2.5.11-0ubuntu0.22.04.5.",
   "date_published": "2026-10-14T14:29:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84471/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84471/",
   "title": "CVE-2026-84471 fixed in Ubuntu:24.04:LTS",
   "content_text": "Fixed versions: openvpn 2.6.19-0ubuntu0.24.04.4.",
   "date_published": "2026-10-14T14:29:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84471/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84471/",
   "title": "CVE-2026-84471 fixed in Ubuntu:26.04:LTS",
   "content_text": "Fixed versions: openvpn 2.7.0-1ubuntu1.3.",
   "date_published": "2026-10-14T14:29:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88964/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88964/",
   "title": "CVE-2026-88964 disclosed",
   "content_text": "An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options",
   "date_published": "2026-10-13T22:15:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88964/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88964/",
   "title": "CVE-2026-88964 fixed in Debian:14",
   "content_text": "Fixed versions: openvpn 2.7.8-1.",
   "date_published": "2026-10-13T22:15:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84790/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84790/",
   "title": "CVE-2026-84790 disclosed",
   "content_text": "OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field",
   "date_published": "2026-10-13T21:39:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84790/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84790/",
   "title": "CVE-2026-84790 fixed in Debian:14",
   "content_text": "Fixed versions: openvpn 2.7.8-1.",
   "date_published": "2026-10-13T21:39:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84790/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84790/",
   "title": "CVE-2026-84790 fixed in Ubuntu:22.04:LTS",
   "content_text": "Fixed versions: openvpn 2.5.11-0ubuntu0.22.04.6.",
   "date_published": "2026-10-13T21:39:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84790/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84790/",
   "title": "CVE-2026-84790 fixed in Ubuntu:24.04:LTS",
   "content_text": "Fixed versions: openvpn 2.6.19-0ubuntu0.24.04.5.",
   "date_published": "2026-10-13T21:39:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84790/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84790/",
   "title": "CVE-2026-84790 fixed in Ubuntu:26.04:LTS",
   "content_text": "Fixed versions: openvpn 2.7.0-1ubuntu1.4.",
   "date_published": "2026-10-13T21:39:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-84790/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-84790/",
   "title": "CVE-2026-84790 fixed in Ubuntu:26.10",
   "content_text": "Fixed versions: openvpn 2.7.7-1ubuntu1.1.",
   "date_published": "2026-10-13T21:39:05Z"
  }
 ]
}