These were already reviewed, the vulnerable components of these libraries are not used in Pritunl and there is no impact to Pritunl servers. The libraries have still been updated in the repository and will be included in the next Pritunl release.
The only recent CVE that has impacted Pritunl software is the eMudhra Intermediate CA Compromise but even this has very limited impact and only on the client. The forum post provides additional details but only the profile import path has some impact. This was patched in Pritunl Client v1.4.4791.77.
The recent Linux kernel TCP packet vulnerability CVE-2026-98432 impacts the kernel and is patched by updating the kernel. There is no confirmed mitigation for this other then updating the kernel and rebooting or with Oracle Linux Ksplice which has a livepatch. The information about Multipath TCP and disabling it as a mitigation is only speculation based on Anthropic mentioning utilizing Multipath TCP for their RCE demonstration. The vulnerable code handles IPv4 options during TCP connection handling and is not limited to Multipath TCP.