CLSA-2026-1790268971
Update of openvpn
No scoreFix available
- re-import the vendor's 2.4.12-2.el8
- ExcludeArch: i686 -- EPEL 8 publishes no i386 tree, so the buildroot for that architecture cannot be assembled; we have never shipped an i686 build here
- skip the loopback TLS test while the tarball's sample certificates are expired (they lapsed on 2024-10-19); the handshake cannot complete and the test hung every build to the 12 h rpmbuild limit
What each source reports
OSV No score
Update of openvpn
- re-import the vendor's 2.4.12-2.el8
- ExcludeArch: i686 -- EPEL 8 publishes no i386 tree, so the buildroot for that architecture cannot be assembled; we have never shipped an i686 build here
- skip the loopback TLS test while the tarball's sample certificates are expired (they lapsed on 2024-10-19); the handshake cannot complete and the test hung every build to the 12 h rpmbuild limit
- Record
CLSA-2026-1790268971- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openvpnTuxCare:CentOS:8.5 |
before 2.4.12-2.el8.tuxcare.els1 | 2.4.12-2.el8.tuxcare.els1 |
openvpn-develTuxCare:CentOS:8.5 |
before 2.4.12-2.el8.tuxcare.els1 | 2.4.12-2.el8.tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1790268971 is a vulnerability with no CVSS score yet in openvpn, published September 24, 2026. No source lists public exploit code. Fixed in openvpn 2.4.12-2.el8.tuxcare.els1.