Re: bookworm und openvpn-Update

Am 04.12.25 um 18:57 schrieb Sebastian Niehaus:
> 
> Spontane Idee: OpenVPN bringt Kernelmodule mit (Stichwort DKMS) - die 
> werden neu kompiliert und (erst) mit einem Neustart des Kernels geladen
> 
> Sebastian
> 

Apticron schickte folgende Meldung zu dem Update:

The following packages are currently pending an upgrade:

	openvpn 2.6.3-1+deb12u4

========================================================================

Package Details:

apt-listchanges: Changelogs werden gelesen...
apt-listchanges: Changelogs
---------------------------

--- Änderungen für openvpn ---
openvpn (2.6.3-1+deb12u4) bookworm-security; urgency=medium

   [ Bernhard Schmidt ]
   * Cherry-pick patches for CVE-2025-13086
     - check-message-id.patch: Check message id/acked ids too when doing
       sessionid cookie checks - bugfix for floating client problem, code
       prequesite for the CVE patch to apply
     - CVE-2025-13086.patch: Fix memcmp check for the hmac verification 
in the
       3way handshake being inverted (Closes: #1121086)

   [ Aquila Macedo ]
   * Add new autopkgtest for unit tests.

   [ Carlos Henrique Lima Melara ]
   * debian/patches/CVE-2024-5594-regression-fix.patch: cherry-pick from
     upstream to fix a regression introduced with CVE-2024-5594's fix. 
Namely,
     "Allow trailing \r and \n in control channel message". (Closes: 
#1112516)
   * debian/salsa-ci:
       - Allow lintian job to fail. Sid's version dislikes things from 
bookworm.
       - Disable gbp setup-gitattributes.
       - Disable reprotest on bookworm. It can't run on bookworm, so the 
build
         fails because of build dependencies problems.
   * debian/tests/unit-tests: enable unit-tests in configure and be verbose.

  -- Bernhard Schmidt <[email protected]>  Wed, 26 Nov 2025 22:54:51 +0100

========================================================================

You can perform the upgrade by issuing the command:

	apt-get dist-upgrade


Ich(TM) kann da nichts dergleichen herauslesen.

-----BEGIN PGP SIGNATURE-----

wmMEABEIACMWIQSue2HxrMJZRKKajDEtEiGQigZX2wUCaTHQBgUDAAAAAAAKCRAtEiGQigZX2/A5
AKDZihdJxI96ABx6FgJhXe8OsdMk2wCfaDBT80fQYvldE4WM7dHaCKpJxVI=
=bCRY
-----END PGP SIGNATURE-----