Is Access Server vulnerable to issues found in Community audit? Are patches needed?

bthurber

I've been tracking the audit of the community version of OpenVPN. It seems that community version 2.4.2. patches most of the vulnerabilities found. How do these vulnerabilities impact the Access Server product? Is there a patch that we should be applying to our Access Server installations?

The Johan

A new build of Access Server that incorporates the fixes is already made, but not yet released. Final tests are being done before the release. Expect it to come out either this week or the next. Keep an eye out on https://www.twitter.com/openvpn/ for our release announcement, and then upgrade your Access Server installation to the latest version.

The Johan

Just wanted to update you, the release has been made.

https://twitter.com/OpenVPN/status/867836616898781184
https://openv.pn/asreleasenotes
https://openv.pn/aspackages

People that have a working server and want to update; grab the installer for your OS and install it using an update command like dpkg -i filename.deb or rpm -Uvh filename.rpm.

If your OS is not supported, don't try anything stupid. Contact the support department for help. To do that go to www.openvpn.net, sign in, and use the 'support' link at the top of the screen...