diff --git a/kernel/ovpn-dco/Makefile b/kernel/ovpn-dco/Makefile
index 64113d3627e9b..14a8468ba6d45 100644
--- a/kernel/ovpn-dco/Makefile
+++ b/kernel/ovpn-dco/Makefile
@@ -9,14 +9,14 @@ include $(TOPDIR)/rules.mk
 include $(INCLUDE_DIR)/kernel.mk
 
 PKG_NAME:=ovpn-dco
-PKG_VERSION:=0.2.20250801
+PKG_VERSION:=0.2.20251017
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL= \
 	https://build.openvpn.net/downloads/releases \
 	https://codeload.github.com/OpenVPN/ovpn-dco/tar.gz/v$(PKG_VERSION)?
-PKG_HASH:=542677e69266e99babb560408b61705ef38a7c469eb820a81f609171faa61b20
+PKG_HASH:=af88c9bc73b350e0cada9aa5b21c5d4b598f9a9868f0b78b2d06026183a67032
 
 PKG_MAINTAINER:=Jianhui Zhao <zhaojh329@gmail.com>
 PKG_LICENSE:=GPL-2.0-only
diff --git a/net/openvpn/Makefile b/net/openvpn/Makefile
index e8309f8fc8271..8374832dec581 100644
--- a/net/openvpn/Makefile
+++ b/net/openvpn/Makefile
@@ -1,4 +1,4 @@
-#
+
 # Copyright (C) 2010-2015 OpenWrt.org
 #
 # This is free software, licensed under the GNU General Public License v2.
@@ -9,14 +9,14 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=openvpn
 
-PKG_VERSION:=2.6.14
-PKG_RELEASE:=9
+PKG_VERSION:=2.6.19
+PKG_RELEASE:=1
 
 PKG_SOURCE_URL:=\
 	https://build.openvpn.net/downloads/releases/ \
 	https://swupdate.openvpn.net/community/releases/
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
-PKG_HASH:=9eb6a6618352f9e7b771a9d38ae1631b5edfeed6d40233e243e602ddf2195e7a
+PKG_HASH:=13702526f687c18b2540c1a3f2e189187baaa65211edcf7ff6772fa69f0536cf
 
 PKG_MAINTAINER:=
 
diff --git a/net/openvpn/patches/100-mbedtls-disable-runtime-version-check.patch b/net/openvpn/patches/100-mbedtls-disable-runtime-version-check.patch
index 59d805ad3e31a..e32f4dda7a263 100644
--- a/net/openvpn/patches/100-mbedtls-disable-runtime-version-check.patch
+++ b/net/openvpn/patches/100-mbedtls-disable-runtime-version-check.patch
@@ -1,6 +1,8 @@
---- a/src/openvpn/ssl_mbedtls.c
-+++ b/src/openvpn/ssl_mbedtls.c
-@@ -1616,7 +1616,7 @@ const char *
+Index: openvpn-2.6.19/src/openvpn/ssl_mbedtls.c
+===================================================================
+--- openvpn-2.6.19.orig/src/openvpn/ssl_mbedtls.c
++++ openvpn-2.6.19/src/openvpn/ssl_mbedtls.c
+@@ -1611,7 +1611,7 @@ const char *
  get_ssl_library_version(void)
  {
      static char mbedtls_version[30];
diff --git a/net/openvpn/patches/101-Fix-EVP_PKEY_CTX_-compilation-with-wolfSSL.patch b/net/openvpn/patches/101-Fix-EVP_PKEY_CTX_-compilation-with-wolfSSL.patch
index 264c28b4b80f2..17c6c3074348b 100644
--- a/net/openvpn/patches/101-Fix-EVP_PKEY_CTX_-compilation-with-wolfSSL.patch
+++ b/net/openvpn/patches/101-Fix-EVP_PKEY_CTX_-compilation-with-wolfSSL.patch
@@ -1,5 +1,7 @@
---- a/src/openvpn/crypto_openssl.c
-+++ b/src/openvpn/crypto_openssl.c
+Index: openvpn-2.6.19/src/openvpn/crypto_openssl.c
+===================================================================
+--- openvpn-2.6.19.orig/src/openvpn/crypto_openssl.c
++++ openvpn-2.6.19/src/openvpn/crypto_openssl.c
 @@ -49,7 +49,7 @@
  #include <openssl/rand.h>
  #include <openssl/ssl.h>
@@ -9,7 +11,7 @@
  #include <openssl/kdf.h>
  #endif
  #if OPENSSL_VERSION_NUMBER >= 0x30000000L
-@@ -1398,7 +1398,7 @@ memcmp_constant_time(const void *a, cons
+@@ -1399,7 +1399,7 @@ memcmp_constant_time(const void *a, cons
      return CRYPTO_memcmp(a, b, size);
  }
  
diff --git a/net/openvpn/patches/102-Disable-external-ec-key-support-when-building-with-wolfSSL.patch b/net/openvpn/patches/102-Disable-external-ec-key-support-when-building-with-wolfSSL.patch
index 50834b3bb77c0..5fa2fdaa2a169 100644
--- a/net/openvpn/patches/102-Disable-external-ec-key-support-when-building-with-wolfSSL.patch
+++ b/net/openvpn/patches/102-Disable-external-ec-key-support-when-building-with-wolfSSL.patch
@@ -1,5 +1,7 @@
---- a/src/openvpn/ssl_openssl.c
-+++ b/src/openvpn/ssl_openssl.c
+Index: openvpn-2.6.19/src/openvpn/ssl_openssl.c
+===================================================================
+--- openvpn-2.6.19.orig/src/openvpn/ssl_openssl.c
++++ openvpn-2.6.19/src/openvpn/ssl_openssl.c
 @@ -1347,7 +1347,7 @@ err:
      return 0;
  }
diff --git a/net/openvpn/patches/103-define-LN_serialNumber-for-wolfSSL.patch b/net/openvpn/patches/103-define-LN_serialNumber-for-wolfSSL.patch
index 690521ee649d7..831f7a4a29183 100644
--- a/net/openvpn/patches/103-define-LN_serialNumber-for-wolfSSL.patch
+++ b/net/openvpn/patches/103-define-LN_serialNumber-for-wolfSSL.patch
@@ -1,5 +1,7 @@
---- a/src/openvpn/ssl_verify_openssl.c
-+++ b/src/openvpn/ssl_verify_openssl.c
+Index: openvpn-2.6.19/src/openvpn/ssl_verify_openssl.c
+===================================================================
+--- openvpn-2.6.19.orig/src/openvpn/ssl_verify_openssl.c
++++ openvpn-2.6.19/src/openvpn/ssl_verify_openssl.c
 @@ -267,6 +267,9 @@ backend_x509_get_username(char *common_n
              return FAILURE;
          }