--===============4392945451043055699==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

==========================================================================
Ubuntu Security Notice USN-8953-1
October 22, 2026

openvpn vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.10
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

OpenVPN could allow unintended access to network services.

Software Description:
- openvpn: virtual private network software

Details:

It was discovered that OpenVPN incorrectly handled certificate subject
fields. A remote authenticated user could possibly use this issue to
impersonate other users.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.10
openvpn 2.7.7-1ubuntu1.1

Ubuntu 26.04 LTS
openvpn 2.7.0-1ubuntu1.4

Ubuntu 24.04 LTS
openvpn 2.6.19-0ubuntu0.24.04.5

Ubuntu 22.04 LTS
openvpn 2.5.11-0ubuntu0.22.04.6

After a standard system update you need to restart OpenVPN to make all the
necessary changes.

References:
https://ubuntu.com/security/notices/USN-8953-1
CVE-2026-84790

Package Information:
https://launchpad.net/ubuntu/+source/openvpn/2.7.7-1ubuntu1.1
https://launchpad.net/ubuntu/+source/openvpn/2.7.0-1ubuntu1.4
https://launchpad.net/ubuntu/+source/openvpn/2.6.19-0ubuntu0.24.04.5
https://launchpad.net/ubuntu/+source/openvpn/2.5.11-0ubuntu0.22.04.6

--===============4392945451043055699==
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----
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=aEdu
-----END PGP SIGNATURE-----

--===============4392945451043055699==--