debbie10t wrotePre-compiled OpenVPN v222 is compromised by the Heartbleed (OpenSSL) exploit.
OpenVPN v222 source can be downloaded and compiled with OpenSSL 101g or later to avoid this problem.
Keeping OpenVPN up-to-date is your choice but old versions will not be supported by openvpn.net
Hi, thx for answer, but it doesn't concern only windows binaries? Linux based system linking to openssl installed on the system, and if openssl is up to date (1.0.1 h now ) heartbleed or lastest issues are not a concern. Or am I wrong here ???
Rest of problems can be hide in OpenVPN 2.2.2 release, but I can't find strong evidence of high risk vulnerables in change logs.
btw: I also absolutely agree that all software should be always in newest versision. This is only one proper security approach.
Regards
ra.n
