Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CentOS OpenVPN packages may fail to build
published 1 month ago
Summary
The OpenVPN and OpenVPN development packages for CentOS 8 cannot be compiled correctly because the test certificates they use have expired and the build system lacks support for the i386 architecture. This causes the build process to hang and exceed its time limit, preventing the packages from being created. Use a newer OpenVPN release or apply the vendor’s updated build instructions that skip the expired certificate test until a fix is provided.
What to do
- Update centos openvpn to version 2.4.12-2.el8.tuxcare.els1.
- Update centos openvpn-devel to version 2.4.12-2.el8.tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:8.5 | centos | openvpn |
< 2.4.12-2.el8.tuxcare.els1 Fix: upgrade to 2.4.12-2.el8.tuxcare.els1
|
| TuxCare:CentOS:8.5 | centos | openvpn-devel |
< 2.4.12-2.el8.tuxcare.els1 Fix: upgrade to 2.4.12-2.el8.tuxcare.els1
|
Original advisory text
Update of openvpn
- re-import the vendor's 2.4.12-2.el8
- ExcludeArch: i686 -- EPEL 8 publishes no i386 tree, so the buildroot for that
architecture cannot be assembled; we have never shipped an i686 build here
- skip the loopback TLS test while the tarball's sample certificates are
expired (they lapsed on 2024-10-19); the handshake cannot complete and the
test hung every build to the 12 h rpmbuild limit
- ExcludeArch: i686 -- EPEL 8 publishes no i386 tree, so the buildroot for that
architecture cannot be assembled; we have never shipped an i686 build here
- skip the loopback TLS test while the tarball's sample certificates are
expired (they lapsed on 2024-10-19); the handshake cannot complete and the
test hung every build to the 12 h rpmbuild limit
References
Timeline
Published24 Sep 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1790268971 · OSV
Track software like this
Free during beta