OpenVPN 2.3.18 released (with security fixes)

Announcements from OpenVPN involving bugs, updates, and new features.
Post Reply
samuli
OpenVPN Technologies
Posts: 105
Joined: Fri Aug 13, 2010 9:05 pm

OpenVPN 2.3.18 released (with security fixes)

Post by samuli » Tue Sep 26, 2017 2:39 pm

The OpenVPN community project team is proud to release OpenVPN 2.3.17. It can be downloaded from here.

This release has an important security fix for legacy setups that may still be using key-method 1. As that option was deprecated 12 years ago we estimate that not many production setups are affected in practice.

In addition Windows installers have been built with NSIS version that has been patched against several NSIS installer code execution and privilege escalation problems. Based on our testing, though, older Windows versions such as Windows 7 might not benefit from these fixes. We thus strongly encourage you to always move NSIS installers to a non-user-writeable location before running them. Our long-term plan is to migrate to using MSI installers instead.

A summary of all the changes is available in Changes.rst, and a full list of changes is available here.

For generic help use these support channels:
Please report bugs and ask development questions here:
--
Samuli Seppänen
Community Manager
OpenVPN Technologies, Inc

irc freenode net: mattock

Post Reply