Commit f61b09

2026-10-18 07:20:26 flichtenheld: -/-
ReleaseHistory.md ..
@@ 178,6 178,13 @@
Security fixes:
+ - Improve on check_session_buf_not_used(), catch possible double-free in
+ the lame duck case ([CVE-2026-84471](https://www.cve.org/CVERecord?id=CVE-2026-84471)).
+
+ (Bug reported by Andreas Gabriel Berbescu,
+ tracked in Github: openvpn/openvpn-private-issues#157, and by
+ Haruki Oyama (Waseda University), tracked in private-issues#132)
+
- reliability layer: avoid unbounded reliable TLS timeout, and ignore acks
for packets that cannot be outstanding ([CVE-2026-84732](https://www.cve.org/CVERecord?id=CVE-2026-84732))
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9