)]}'
{"id":"openvpn~1908","triplet_id":"openvpn~release%2F2.6~Id8ac9c48a8f751b0df95c6436ad3fbff3c4ae4a6","project":"openvpn","branch":"release/2.6","full_branch":"refs/heads/release/2.6","attention_set":{},"removed_from_attention_set":{"1000030":{"account":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"last_update":"2026-09-11 15:02:51.000000000","reason":"Change was submitted"},"1000053":{"account":{"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"},"last_update":"2026-09-10 07:29:07.000000000","reason":"removed on reply"},"1000003":{"account":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"last_update":"2026-09-11 15:02:51.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Id8ac9c48a8f751b0df95c6436ad3fbff3c4ae4a6","subject":"Avoid unbounded reliable TLS timeout","status":"MERGED","created":"2026-09-08 16:34:45.000000000","updated":"2026-09-11 15:02:51.000000000","submitted":"2026-09-11 15:02:51.000000000","submitter":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"1908","meta_rev_id":"0abf2cb6fff72191b801723dfa70248a56e42179","_number":1908,"virtual_id_number":1908,"owner":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"actions":{},"labels":{"Code-Review":{"all":[{"value":0,"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"},{"value":0,"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"}],"values":{"-2":"This shall not be submitted","-1":"I would prefer this is not submitted as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","default_value":0}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"}],"CC":[{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-09-08 16:34:45.000000000","updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"real_updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"reviewer":{"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"},"state":"REVIEWER"},{"updated":"2026-09-08 16:34:45.000000000","updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"real_updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"reviewer":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"state":"REVIEWER"},{"updated":"2026-09-08 16:34:45.000000000","updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"real_updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"reviewer":{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"},"state":"CC"},{"updated":"2026-09-09 11:25:55.000000000","updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"real_updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"reviewer":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"state":"CC"},{"updated":"2026-09-09 13:25:39.000000000","updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"real_updated_by":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"reviewer":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"state":"REVIEWER"},{"updated":"2026-09-11 15:02:51.000000000","updated_by":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"real_updated_by":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"reviewer":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"state":"CC"}],"messages":[{"id":"5c7d99da14e087585df15548a04da9e3df875841","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"date":"2026-09-08 16:34:45.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"655846f878382e4cf023ac8d13030a90fec600d8","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"date":"2026-09-09 11:25:55.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"05550a7c0f4bf9a76edf6c5b567659e8a6851de9","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"date":"2026-09-09 13:25:39.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"c5661894e8ccfe6a05f31fc63a1c119a8ce0c6f1","author":{"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"},"date":"2026-09-10 07:29:07.000000000","message":"Patch Set 3: Code-Review+2","accounts_in_message":[],"_revision_number":3},{"id":"0abf2cb6fff72191b801723dfa70248a56e42179","tag":"autogenerated:gerrit:merged","author":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"date":"2026-09-11 15:02:51.000000000","message":"Change has been successfully pushed.","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"93d68b1fb4b90e08f4ce66a70567e1480bbdeed4","revisions":{"b0394c9fa8de3a9b40f6f2c34550e3f637c50dfe":{"kind":"REWORK","_number":1,"created":"2026-09-08 16:34:45.000000000","uploader":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"ref":"refs/changes/08/1908/1","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/08/1908/1","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/1 \u0026\u0026 git checkout -b change-1908 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/08/1908/1","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"6701dba01aa860e64db2c91d4974589921bbcc65","subject":"openvpnserv: harden CheckConfigPath() a bit more"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-09-01 11:35:09.000000000","tz":120},"committer":{"name":"Max Fillinger","email":"maximilian.fillinger@sentyron.com","date":"2026-09-08 15:53:54.000000000","tz":120},"subject":"Avoid unbounded reliable TLS timeout","message":"Avoid unbounded reliable TLS timeout\n\nAvoid an unbounded TLS retransmit timeout, which could potentially\ntrigger an integer overflow.\n\nThe maximum initial timeout is defined in reliable.h and used to\nconstrain --tls-timeout, so that the relation between the option range\nand RELIABLE_MAX_TIMEOUT_SHIFT is explicit and checked at compile time.\n\nGithub: OpenVPN/openvpn-private-issues#161\nReported-By: Mark Bregman (Fox-IT) \u003cmark.bregman@fox-it.com\u003e\nCVE: 2026-84732\nChange-Id: Id8ac9c48a8f751b0df95c6436ad3fbff3c4ae4a6\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\nSigned-off-by: Razvan Cojocaru \u003crazvanc@mailbox.org\u003e\nAcked-by: MaxF \u003cmax@max-fillinger.net\u003e\n(cherry picked from commit 207ac5f47e46565881dcec385020ebdcb682caa4)\n"},"branch":"refs/heads/release/2.6"},"3fb85407fc37bf213e637c60c6a9210257b0376e":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-09-09 11:25:55.000000000","uploader":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"ref":"refs/changes/08/1908/2","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/08/1908/2","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/2 \u0026\u0026 git checkout -b change-1908 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/08/1908/2","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"2858238f05960e5c7087b39c40cd1671f137a75a","subject":"openvpnserv: harden CheckConfigPath() a bit more"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-09-01 11:35:09.000000000","tz":120},"committer":{"name":"Max Fillinger","email":"maximilian.fillinger@sentyron.com","date":"2026-09-09 11:21:25.000000000","tz":120},"subject":"Avoid unbounded reliable TLS timeout","message":"Avoid unbounded reliable TLS timeout\n\nAvoid an unbounded TLS retransmit timeout, which could potentially\ntrigger an integer overflow.\n\nThe maximum initial timeout is defined in reliable.h and used to\nconstrain --tls-timeout, so that the relation between the option range\nand RELIABLE_MAX_TIMEOUT_SHIFT is explicit and checked at compile time.\n\nGithub: OpenVPN/openvpn-private-issues#161\nReported-By: Mark Bregman (Fox-IT) \u003cmark.bregman@fox-it.com\u003e\nCVE: 2026-84732\nChange-Id: Id8ac9c48a8f751b0df95c6436ad3fbff3c4ae4a6\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\nSigned-off-by: Razvan Cojocaru \u003crazvanc@mailbox.org\u003e\nAcked-by: MaxF \u003cmax@max-fillinger.net\u003e\n(cherry picked from commit 207ac5f47e46565881dcec385020ebdcb682caa4)\n"},"branch":"refs/heads/release/2.6"},"3466b14adee823daf09c0ac0eb0dc75631dc695e":{"kind":"REWORK","_number":3,"created":"2026-09-09 13:25:39.000000000","uploader":{"_account_id":1000030,"name":"Max Fillinger","email":"max@max-fillinger.net","username":"MaxF"},"ref":"refs/changes/08/1908/3","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/08/1908/3","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/3 \u0026\u0026 git checkout -b change-1908 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/08/1908/3","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/3 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"a453210da741209545b1b6d026a6487151789341","subject":"openvpnserv: harden CheckConfigPath() a bit more"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-09-01 11:35:09.000000000","tz":120},"committer":{"name":"Max Fillinger","email":"maximilian.fillinger@sentyron.com","date":"2026-09-09 13:22:56.000000000","tz":120},"subject":"Avoid unbounded reliable TLS timeout","message":"Avoid unbounded reliable TLS timeout\n\nAvoid an unbounded TLS retransmit timeout, which could potentially\ntrigger an integer overflow.\n\nThe maximum initial timeout is defined in reliable.h and used to\nconstrain --tls-timeout, so that the relation between the option range\nand RELIABLE_MAX_TIMEOUT_SHIFT is explicit and checked at compile time.\n\nGithub: OpenVPN/openvpn-private-issues#161\nReported-By: Mark Bregman (Fox-IT) \u003cmark.bregman@fox-it.com\u003e\nCVE: 2026-84732\nChange-Id: Id8ac9c48a8f751b0df95c6436ad3fbff3c4ae4a6\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\nSigned-off-by: Razvan Cojocaru \u003crazvanc@mailbox.org\u003e\nAcked-by: MaxF \u003cmax@max-fillinger.net\u003e\n(cherry picked from commit 207ac5f47e46565881dcec385020ebdcb682caa4)\n"},"branch":"refs/heads/release/2.6"},"93d68b1fb4b90e08f4ce66a70567e1480bbdeed4":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":4,"created":"2026-09-11 15:02:51.000000000","uploader":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"ref":"refs/changes/08/1908/4","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/08/1908/4","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/4 \u0026\u0026 git checkout -b change-1908 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/08/1908/4","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/08/1908/4 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"7dae631514b331485505470bbb8bcc67fb881d8f","subject":"Move check_session_buf_not_used method into the method that free the buffer"}],"author":{"name":"Arne Schwabe","email":"arne@rfc2549.org","date":"2026-09-10 08:50:22.000000000","tz":120},"committer":{"name":"Gert Doering","email":"gert@greenie.muc.de","date":"2026-09-11 09:51:13.000000000","tz":120},"subject":"Avoid unbounded reliable TLS timeout","message":"Avoid unbounded reliable TLS timeout\n\nAvoid an unbounded TLS retransmit timeout, which could potentially\ntrigger an integer overflow.\n\nThe maximum initial timeout is defined in reliable.h and used to\nconstrain --tls-timeout, so that the relation between the option range\nand RELIABLE_MAX_TIMEOUT_SHIFT is explicit and checked at compile time.\n\nGithub: OpenVPN/openvpn-private-issues#161\nReported-By: Mark Bregman (Fox-IT) \u003cmark.bregman@fox-it.com\u003e\nCVE: 2026-84732\nChange-Id: Id8ac9c48a8f751b0df95c6436ad3fbff3c4ae4a6\nSigned-off-by: Arne Schwabe \u003carne@rfc2549.org\u003e\nSigned-off-by: Razvan Cojocaru \u003crazvanc@mailbox.org\u003e\nAcked-by: Razvan Cojocaru \u003crazvanc@mailbox.org\u003e\nGerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1908\nAcked-by: MaxF \u003cmax@max-fillinger.net\u003e\n(cherry picked from commit 207ac5f47e46565881dcec385020ebdcb682caa4)\nMessage-Id: \u003c20260910085028.30710-1-gert@greenie.muc.de\u003e\nURL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg39049.html\nSigned-off-by: Gert Doering \u003cgert@greenie.muc.de\u003e\n"},"branch":"refs/heads/release/2.6"}},"requirements":[],"submit_records":[]}