Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Mageia 9 OpenVPN Important Security Fix CVE-2026-35058 MGASA-2026-0126

mageia
Calendar Grey May 10, 2026
Dist Mageia Esm H88
Updated OpenVPN packages for Mageia 9 address significant security risks including packet leaks and server assertions.
MGASA-2026-0126 - Updated openvpn packages fix security vulnerabilities

Summary

Description: CVE-2026-35058 - fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key CVE-2026-40215 - fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances

References

- https://bugs.mageia.org/show_bug.cgi?id=35442

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFR4RR6F447AZK2ZTKVGZP3NKKWFW6DW/

- https://community.openvpn.net/Security%20Announcements/CVE-2026-35058

- https://community.openvpn.net/Security%20Announcements/CVE-2026-40215

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35058

- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-40215

Topics%20covered

Topics Covered

security advisory security fix important openvpn Mageia packet leak

Resolution

SRPMS

- 9/core/openvpn-2.6.20-1.1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 10 May 2026
URL: https://advisories.mageia.org/MGASA-2026-0126.html
Type: security
CVE: CVE-2026-35058, CVE-2026-40215

Topics%20covered

Topics Covered

security advisory security fix important openvpn Mageia packet leak

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here