OpenVPN and CVE-2017-3737, CVE-2017-3738

anselch1011 · Post by **anselch1011** » Mon Dec 11, 2017 10:35 am

Hello!

I have read recently news about 2 vulnerabilities that include in openssl 1.0.2 library.
The 2 vulnerabilities are CVE-2017-3737 and CVE-2017-3738.
( https://www.openssl.org/news/secadv/20171207.txt )

I use OpenVPN GUI Program in Windows system, and OpenVPN Connect App in Android smart phone.

So, I have questions about these vulnerabilities.

I have seen that OpenVPN GUI Program uses openssl 1.0.2l.
Do you have plan to upgrade soon?

Thank you!