MGASA-2026-0498 Updated openvpn package fixes security vulnerabilities

Improve on checksessionbufnotused, catch possible double-free in the lame duck case. CVE-2026-84471 Reliability layer: avoid unbounded reliable TLS timeout, and ignore acks for packets that cannot be outstanding. CVE-2026-84732...

Updated openvpn package fixes security vulnerabilities

Improve on checksessionbufnotused, catch possible double-free in the lame duck case. CVE-2026-84471 Reliability layer: avoid unbounded reliable TLS timeout, and ignore acks for packets that cannot be outstanding. CVE-2026-84732...

Security update for curl

This update for curl fixes the following issues: Security issues fixed: CVE-2024-7264: ASN.1 date parser overread bsc1228535 CVE-2024-6197: Freeing stack buffer in utf8asn1str bsc1227888 CVE-2024-2379: QUIC certificate check bypass with wolfSSL bsc1221666 CVE-2024-2466: TLS certificate check bypa...

CVE-2019-3883

In 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocktimeout' seconds. However this timeout applies only for un-encrypted requests. Connections using SSL/TLS are not taking this timeout into account during...