Is Access Server vulnerable to issues found in Community audit? Are patches needed?
-
- OpenVpn Newbie
- Posts: 15
- Joined: Thu May 25, 2017 12:21 pm
Is Access Server vulnerable to issues found in Community audit? Are patches needed?
I've been tracking the audit of the community version of OpenVPN. It seems that community version 2.4.2. patches most of the vulnerabilities found. How do these vulnerabilities impact the Access Server product? Is there a patch that we should be applying to our Access Server installations?
- novaflash
- OpenVPN Inc.
- Posts: 1073
- Joined: Fri Apr 13, 2012 8:43 pm
Re: Is Access Server vulnerable to issues found in Community audit? Are patches needed?
A new build of Access Server that incorporates the fixes is already made, but not yet released. Final tests are being done before the release. Expect it to come out either this week or the next. Keep an eye out on https://www.twitter.com/openvpn/ for our release announcement, and then upgrade your Access Server installation to the latest version.
I'm still alive, just posting under the openvpn_inc alias now as part of a larger group.
- novaflash
- OpenVPN Inc.
- Posts: 1073
- Joined: Fri Apr 13, 2012 8:43 pm
Re: Is Access Server vulnerable to issues found in Community audit? Are patches needed?
Just wanted to update you, the release has been made.
https://twitter.com/OpenVPN/status/867836616898781184
https://openv.pn/asreleasenotes
https://openv.pn/aspackages
People that have a working server and want to update; grab the installer for your OS and install it using an update command like dpkg -i filename.deb or rpm -Uvh filename.rpm.
If your OS is not supported, don't try anything stupid. Contact the support department for help. To do that go to www.openvpn.net, sign in, and use the 'support' link at the top of the screen...
https://twitter.com/OpenVPN/status/867836616898781184
https://openv.pn/asreleasenotes
https://openv.pn/aspackages
People that have a working server and want to update; grab the installer for your OS and install it using an update command like dpkg -i filename.deb or rpm -Uvh filename.rpm.
If your OS is not supported, don't try anything stupid. Contact the support department for help. To do that go to www.openvpn.net, sign in, and use the 'support' link at the top of the screen...
I'm still alive, just posting under the openvpn_inc alias now as part of a larger group.