Moderate: openvpn security update (Amazon Linux 2023)

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40215: In a race condition an old TLS session could still try to send a packet but also get replaced by a new session. In this case, the buffer of the new session is still referenced. Add the check_session_buf_not_used function to mitigate this problem. CVE-2026-35058: According to upstream advisory (https://community.openvpn.net/Security%20Announcements/CVE-2026-35058): OpenVPN server crash via ASSERT triggered by malformed tls-crypt-v2 packet; attacker with a valid tls-crypt-v2 client key can send a crafted control channel packet to crash the server (DoS). Fixed in 2.6.20 and 2.7.2.