list-openvpn-nl

list-openvpn-nl@lists.fox-it.com

1 participants
41 discussions

CVE-2025-2704: OpenVPN-NL unaffected
by Max Fillinger 03 Apr '25

03 Apr '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! Yesterday, CVE-2025-2704 for OpenVPN has been published. It affects OpenVPN versions 2.6.1 to 2.6.13. The OpenVPN community has released version 2.6.14 which fixes the vulnerability. Since the current version of OpenVPN-NL is based on 2.5.11, it is not affected by the vulnerability and no action is required. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpK49A7EHchkpcCjYxU5xiqPE8EQFAmfuzoIACgkQxU5xiqPE 8EQ3HA/+MJNIR5xITpQBvaICQlInxiNtEdGert7D1qVNp95FxX+a2+yGfhFJaoSS gyaqUwRXzDwE1hEL63wSTNCXRySWDK15Ux3Y/Ot0HeCENgKnRmE8e/MhN6F/ufm3 vWOfxF4/62QfAUNzrYlhhaAiG5TnvpR4YNngDrWjJtJmNODQvVSIzmMuD3PNgg0y yN5tNQTgG6Eb3aZkaKff+hItOc9gPUJiJis8QmXU/W3LmZq88kundpfc4PEKBi86 dMUXKETwYsolEXI9rphAbIyzg2vRcr4YXFt3reUCgWld5bQpQ+5WiebSqRLRX+lK yGABrbezz7ierthq8KfBhxsswPxkVNwDUFbguUX6yE33faxkFyfHStM79YiXlPi1 +vYammGGOwEZciwzS2LejZOezq7BkVJUFD5VgPDWTxY3Ls2ZQ40Wg9jJE741V+G4 6j4BKidn+821Qr7knnfXeWQzEvcgTeGC+dW/Sn/+1nR7j2spnOPgyokHNxJUes8F o+kb3Y9puoLyl3IUHdsguvfqSM109OukJ06WyR8JR04pPJ+a70HHNaAE8+j8mkEo njE4pIA6FWSoLTXLiPYB12hdyuxSsTWao3EwvJ9Rnf4fQSCZMmHicAEmeQrAL1u2 SVH3UJsX5o1aPNqGw56axwAGVMdx6rQ4ug62+roS/BdmGuVvn3M= =thQh -----END PGP SIGNATURE-----

1 0

New ownership of Fox Crypto and upcoming name change
by Max Fillinger 02 Apr '25

02 Apr '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! We are proud to share that Fox Crypto B.V. has been sold to CR Group, a European leader in secure and sovereign communication solutions tailored for defense and government agencies. We will continue developing OpenVPN-NL, but, since Fox-IT remains with NCC Group, Fox Crypto will change its name. We expect to announce our new name within the next 6 months. Then, the OpenVPN-NL website, mailing list and package repositories will move to a new URL. We hope to have some grace period where both the old and new URL will work. Please continue to monitor this mailing list for further information. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmftPa4ACgkQ5IsYow7q aai0oQv9HnOEpGeKfnHpPWD6k1Qj3ZU4c/vw1F2mvCoP/VUhBj1G4dU2FSIM8t3J eVuvKhKjICJP5aMGKDnqK4mS3qAiQ4BVvT40sKfJqkpzZcyPQEwlDYOt7ds7CvUR nVx748L+NOF3WaRttWPTvLe1GTGobpX4B/qozOAeJG3b/GlN1R1XCCidmBHsxmYT DK7h7I+wHNuzvnx4tyO6pXpVSl1JtsL8is+91D1lxlCtyrzTTa4P3GohnAykey/T vGVJf1xElyZmFgYw7rXqACDhvtbT/5QehdPn5ynGoY0cGxngRHU8wpjBCqih2C1q A4wh1hyWCGyybeCtigglP+Ms7/1kSs9bBG1T9WNbp+xVS4b90lU5pRcawQSk0KEB nEOdBCt8SiDQTfRB8+uAWy7Ih9HY0DD0P09kLWv+bMEhb1O/1H1wX5xCyEg5HQ19 dgajEnS9+mxfE6BS1BSTB0IwO4YoXhv2A4fHX7DQOCSvDLJXASUpQeqbYnX9de2R O6d2+q7piQIzBAEBCgAdFiEEpK49A7EHchkpcCjYxU5xiqPE8EQFAmftPb0ACgkQ xU5xiqPE8ESMGQ/+I0hqVjNQF/lNH3+3sxZ2U0Ux4GXzWBjhrcKYZ7CalljBKzml Vc3zukWcCAa5pM8+NNjtb1trwx+sSqpNwqblCWPiXBdci3c12joLi1WBIkVhUnCN f4ciC6gbfGXg+p9lmQFZFnSCAElRdzhhw73zky3PCY2QtNKq3JmBqjb29+M3lHWX ORYt5ScoXBcCXK5HSxtbQRBMJzQY6V0qn/rLgN7QRbT5GPc51dFvxKQRNyeOLQ1T pWMkNASyyUlgEiddR+qMiaObk5XJ8RuRojaezYxoUkblI8ldvYyugNaVOw+EpQe+ 6wydlsUclCP+ZCd4hNnlK4STlBgoS81KBhyVcjOP1MPB0jXEWkhDzcWW0LPdCIxD /yBn6Pq0pHQUcHKGp75TN/MkC8tdKRw1+Vh+CGF+/Dsqj/g5VrOHkcN85Rtg2VG2 5nCkEP72Y/P/gqweRAEcBMcm1Di2KkoR1Xza1AzsOs1MsrWfIw8gdS2p1oXo/2RS C8hTYh90OYPR6sEkcU7qBY6XXtShIGAYAoujYyZMFCSSvXVC12gEpxROuVhj5fXA d7RtsjyDMJadDw7EJel3vAymqYKNZzg0rsJ371RAWFOx989bEF4jI5eJ3l5spFWN j+XAH9dDeVR+NxjfiDv+GaX0wzaPu6NzPrGYi9jIXrveJfrvJ3gu2vEN7v0= =UYpt -----END PGP SIGNATURE-----

1 0

New GPG key
by Max Fillinger 02 Apr '25

02 Apr '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! Since the GPG key I'm using to sign these e-mails is about to expire, I am going to switch to a new key. I have added it to the public key block at https://openvpn.fox-it.com/repos/fox-crypto-mailinglist.asc. The fingerprint of the new key is: A4AE 3D03 B107 7219 2970 28D8 C54E 718A A3C4 F044 I have signed this message with both the old and new key. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmftM3AACgkQ5IsYow7q aajNygwAp6rzMgWCMQnzSwDZ3wQpBdBEpYKZAmAzQuJKPj9WIlmb9TNOzdmWdfEl dB+Z+xK3DSPyDVCDIh+NliG7lciOR1yz+4JXOmMUbfzKL9nA+eIcdhuonarKRDiI Acw8XFIS2UdCQDWxmEOYvaqbW3dAY76C6DRR8eWEOqFjBvb4uWRYUQTKoVlIjkik rJppbktM/74yiKQyEwjWhZ/hiJNlNg5UNbwRSG4XHcsWpDoPvMnEHIc1dsxwywlO TciPXyNmGyzBrqov+Ppft+3MAl+Dcicy4JP0zdEGqvSbbDt2wjy3rtAu14sxwdl9 qTE5w6Z1ZxhbkHjJ4Vo+HTCEdsM/djP6RXWuscdRZaO0JKphp3jw6PMIE1QL0EBX I9le8Vr1MrLQ6CsuWfjr5xMeS1hoNybpZe+UeNtvS5StyO4UuiB+WxjDesp8BK/o OjHb/pIaCy9YHJQ+Z+iJDZVbWgmPIazZxz1/q9XbPvZeV3AkLiqRLdsomikurOGs LlQOVpQ8iQIzBAEBCgAdFiEEpK49A7EHchkpcCjYxU5xiqPE8EQFAmftM4QACgkQ xU5xiqPE8ETsWhAAvuHxmcuLFqCBb9mYRDYktaRujAMBjAs7Wn2pL6OzVuyBXWW7 YZMhz2mtYUlXeD0GQuLjCUcO3Ox9ApXLfLNlAhhxEm6Nu7IwJMutnrcjPg4EqaaN Vgk4J8rb0l9w2F+T3iJKd9sC3slvOlBibeMH4s7LqYXtk06ieMywvWF1uMQ17vCz Hk36U1SOA/oX9OfsVBKEAS/ntIIIUSV6ovrLBF7uLATjPRpLRn9bA3xUtNZMRiKi VrCBdjBtppvL5OvhRfJ54ZHZjtg1YkpWhf5DL2mpwyzzeqhA1IalL+ELZRnrP/LR qZUP1gJZkDWQZvJ1/NSfyw8k1mz3/9GnLaMCUXU4cumQjyQivKQ1m8Z9bLP/P0r9 LnYJXzNOL2yCkSTJyUD+2Wty+IG5RYeWG8DtKRT4QlFbjNBGMuAUu+018ERc9TEv N0NfJ5x0kNh8DibWrw9K7wta/ahm/eZvHbZbcJcNTGkz+tMFVPcZsNNHXrC8QYIs /tX4IMAoZByOHeueC8/0nJzE1jmKomnNNY9JNLDh10L843bQob8o1hHie/4+mYyU Brxex37T3k2OB51813d9Z/b26FD8vFvamT/eXkFExu9ebKTPutorfHR6z4880GnP F6RyCZAu6yWQntyrFga9zPRvULdSw0lJhClsxO88IPzSzQnj/sLA1v4CgcQ= =v6BH -----END PGP SIGNATURE-----

1 0

Mbed TLS CVE-2025-27809
by Max Fillinger 27 Mar '25

27 Mar '25

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! A CVE for mbed TLS has been published, CVE-2025-27809. The issue is that mbed TLS silently skips validating the hostname on the server certificate if the expected hostname is not provided via a call to the function mbedtls_ssl_set_hostname(). OpenVPN does not use the TLS library to validate hostnames. Instead, OpenVPN itself validates the name on the peer's certificate if the configuration option --verify-x509-name is given. This check is performed independently of mbed TLS and is not affected by the CVE. If you do not use this option, the name of the certificate can not be validated because OpenVPN does not know what the expected name is. The deployment advisory (inzetadvies) for OpenVPN-NL requires clients to use this option to validate server certificates. (Appendix 1) Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmflPOYACgkQ5IsYow7q aajgMQv/Ww3KQP2IFFoTqBWCqGNmeUtCunH/x6K87K4ifim99bnd1p7El0xrG6B0 2/BbVsrefmO0jdnsM9erCPxdt8EDnHHt+Sc+Xuk6DCGGfzRZuPhPDj4wU1XXvsJ0 xIEvDO7wz1LuWPI9iPQ8oswjjluA9pwfU5g+J7I34MIa7I2jvOoKyGb7p1uMPbzK qeUfjUaWCsjoRUtY36qZDOj50BR9JJnC1IvoGAXx1UQl7zzB5edL41W2Teu5MSXh hxRsEjfMZTMGE0/u2WuOaGGzltx1zeRoERdk8AOBsKdlC4C1Ue4lcCzfJ4vWGE7f UAtvWRX3oVLOHB1mi1fMaXxUo1GkvglxNpcfc05eTV0vxvJNhnc+kyF4ui0u/BFZ jLxaw0CgDmWaoUA3UF1G/OvE8OyktpSWOVp2JP0cQG0lwyDKGlb474u7jYo82v4/ tTPdaiJlkNPnZT7XiRlj6JO61zizVUNCybR6469vXtZUdLDaSATPq1r3PFDVaHsy Ll+6k6Bp =Izyt -----END PGP SIGNATURE-----

1 0

RHEL8 repository fixed
by Max Fillinger 27 Nov '24

27 Nov '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! A user has reported that the RHEL8 repository was not working. We have now fixed it. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmdHGnAACgkQ5IsYow7q aagmwAwAkteqSA60c6Gej7h2G/Q4NNXOMawF57x0v293s9Q7rz1GF3Q9EtYdXu8G hpUK6zZAcOL6lAahs1q/SA5IcF1HbCS7/AG/vj+6cxESUi6YrkRZbPLmtvzPmQfS gAILl3OfXMiXSRztXrghCT1x+fA435q8P7ZDJvb1fk6MQlnf602xshjnFWguuPR8 cigefJW/VLE9m4ePfDCRIaHHePV2Mo1hncWBIUGOQWz1od4b+dCfQsdws6azQiCL sVUJyL408YTFrZhnQJ0VuDDRWCiG6zYpzxzPET/pkrFQS0ZMNmA4nNf4k+us3wcg UFbQB6I+TkpP4jjj2EigGWoxd2gIc70O9k2f0l1HlWM6WJTbVLCmtYkCDcJw+MUT Pke9S/qc3Jhe/Zyw5wKuRunmqXaMwBD7TYnaMSIF5Y+YA2xcVFtsEj/x/eiCozOF D6EzeLALsosKGHDaaY8ieRy28VNaQX2WdFpScyL9Kny3zbqVoyUrYFWw5I3EBuQu s/jgNQlX =DH/S -----END PGP SIGNATURE-----

1 0

RHEL7 package for OpenVPN-NL 2.5.11-nl1 released
by Max Fillinger 23 Oct '24

23 Oct '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! We have released a package of OpenVPN-NL 2.5.11-nl1 for Redhat Enterprise Linux 7. A user has reported a bug in 2.5.6-nl1 and 2.5.10-nl1 on RHEL7. It tries to run /usr/bin/ip to configure the tun interface, but on Redhat, the ip binary is only in the /usr/sbin/ directory. This can be worked around by adding "iproute /usr/sbin/ip" to the configuration. Since 2.5.6-nl1 and 2.5.10-nl1 are not working correctly on RHEL7, we decided to make one last release for RHEL7. The cause of this bug is that our old RHEL7 build machine had a symlink from /usr/bin/ip to /usr/sbin/ip, so the OpenVPN build process selected /usr/bin/ip as the binary to use. We compiled the 2.5.11-nl1 source code on a fresh RHEL7 VM and it now uses the correct binary. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmcY6mwACgkQ5IsYow7q aag0dgv/dvzX96U/KwT3i42Y9IL09BUjCoG3lbRniqG/e1srUwjSFinSc/K2OrxZ 8NqfoN1Gmv6E3hPJQdN+rAOxkCbxO3q/UZ7+XUWSt6/d+olnSuCGtQP0r/efBL5D s3PcKLKeQCWf662MtNOCloeOQh4W9MMMwh/1Atiys5F2DTNPFe9ahfBgxuRrlNCe 3RDAuH8a5nGXa6snOaJQwFg7WGlbgnNpmkTXIYWDXvmjRIhY/Xr0bgWrS5QffbC0 quPvimUbFVlvKkCtQ9iOZPgsLTqZGN/v1HL3lUQF4AnBTe3Y1swDMcLruR/nuhaQ 3E2VmEqqAD41aOPKhGD4KKGI5m8mZuGcs8Et6yabEVKjs27ggFBfbB54ZbcCME/p GkJV9L0tO3ppP5jbHVxk/ufJDZL+UERkJB26c5rLMbXET6IOt5JsOkffOttXvnpt bqmcJ2KBTQUSHj2kI7lLFxHWrQyC6T1dsg7E0GDWB47lddUM2VFtobPjEPAH1MLC /NBaEmUK =Ikyb -----END PGP SIGNATURE-----

1 0

OpenVPN-NL 2.5.11-nl1 released for Linux
by Max Fillinger 09 Oct '24

09 Oct '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! We have released the Linux packages for OpenVPN-NL 2.5.11-nl1. The Windows release will follow later because the signing key has expired and we need to replace it. This version fixes CVE 2024-5594, a minor vulnerability where a malicious peer can corrupt log messages (after successful authentication). Since newer versions of mbed TLS can now be licensed under the GPLv2, we upgraded to version 2.28.8 in this release. We have added packages for Ubuntu 24.04 (Noble Numbat) and Redhat Enterprise Linux 9. We removed packages for Redhat Enterprise Linux 7 as its Maintenance Support 2 phase has ended. This will be the last release for Suse Linux Enterprise Server 12, because its General Support ends on October 31 2024. Installation instructions and direct download links for the packages can be found on https://openvpn.fox-it.com/software.html. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmcGyMsACgkQ5IsYow7q aajjhgwAjRNoQHfrFE3vkwwNpKovzs03a/84IxB6BxzWGavc053ETKtZ36XWddAC tPGhEPI3W1ngs8cgwDZGqtJPUV/sbyZf71h1/azkw6zCl5tZ/PPeywvYeagGxAzD GhGb9zYTpRHt222XRnrk1brFXQPW43vPHBbb5X01jVd0ckHrOrVvZso2+kzVZ/US 6YXo/J+LaWoJlcOfsFA2rzQRRYLym3I5gGyrLm6D5rEL3eNWqTY7u+B02CpN8QHH PujIFHw90JDRVhRjmZkTDFSPogWojw3ZF0o0dlKqrFK7da6vTO/Gq64EVTk8G4tY d4yykQhVeQgLkC/IVFPfiwWP4guzKWWzPy0oxSgyC4YEaXP8oPmv2BCC+i38KcMr cJbj3cmBtvFcNKqNkmbBOFoc63rdF1nXlX4CeZ626QFOtdpEPYHaguB6OjR2XqNB q8o7TW0V6r074B9yzusz4ubiD3fICy3EpcMIDJ0JnwBcixPqxR/D5FTVmEziUeyS /CdDZ8Yd =Kh2S -----END PGP SIGNATURE-----

1 0

OpenVPN-NL 2.5.10-nl1 released for Linux
by Max Fillinger 15 May '24

15 May '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! The Linux versions for OpenVPN-NL 2.5.10-nl1 have now been released. Unlike the Windows version, which fixed several security bugs, updating the Linux version is not urgent. We have added packages for Debian Bookworm and removed Debian Buster because it is end-of-life. This will be the last release for Redhat Enterprise Linux 7 as its Maintenance Support 2 phase will end on June 30th. Installation instructions and direct download links for the packages can be found on https://openvpn.fox-it.com/software.html. We are planning to add packages for Ubuntu 24.04 (Noble Numbat) and Redhat Enterprise Linux 9. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmZDbCoACgkQ5IsYow7q aajlSAv+Jd40B97YMutw042xpcrELaV4OBhkuBYP+Ct/7oA3Dugvr+cI0twJC/Os rA1xw/VHmN/Ywe4mYiluvXdVkbnzw0hJsDzkogXaMWv+e97eVMpIWy//lCAFhzRX 9Jw4w0Z+4qFUol4Yi2xO0xF87qN0YFiY6h1mRe9xikfvB87agd2p+v/Nt3QlGDc2 LCl9MRXtntWVA7KkdakvZY1ClKxdQ7oEzkihDb8/+3+xywFtW+OVcNVKA/KoJ8sb /+nKKL46cFrXdUrOS8fyqSmTTaeD28emFGBPJOEfmyGkOgBnRlXIztgZEf7jPpe7 +VnXN5Vjo5JlnqDD/QO5WecxLNnRmymrekqm2DSU0yy2a0CMwnDyWoi6jigdgzYl iKtlzXrOoSX//SEBdhprMmb6KvIOK0jF0HIk7lX8x6JpT+Gq04e3g+22UA9q1ehf fBucaxI7ztiWUcODhD47vP5rKyLKfQIhZMXmI02leCnleddEDgDPbJr9lO9m29li pMVNpPQV =gmg5 -----END PGP SIGNATURE-----

1 0

OpenVPN-NL 2.5.10-nl1 released for Windows, includes vulnerability fixes
by Max Fillinger 15 Apr '24

15 Apr '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! OpenVPN-NL 2.5.10-nl1 has been released for Windows and can be downloaded at https://openvpn.fox-it.com/repos/windows/openvpn-nl.msi. This release fixes CVE-2024-27459, CVE-2024-24974, CVE-2024-27903 and CVE-2024-1305. We recommend to update Windows installations of OpenVPN-NL as soon as possible. Linux packages for 2.5.10-nl1 will follow shortly. The Linux version is not affected by the CVEs, so on Linux the update is not urgent. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmYdS38ACgkQ5IsYow7q aaj9Lwv7BceXxA0Yx0BfX/s6M3fGWD7qvtNt4WFMsotm9ac33+Goa78GHTLqNWci CdJ1FbrZKJrTfYGSSCoUzwLMacPXyqFK7kmwT6O5C7IQw5I0Qrdrs5J+RWeDlPaL dTS6MDC+vRWkHosr2rgECETYV1ify2L4Ztt2B5T3+lRujPV4vgPPUZe49Z4x24i2 s++U0qvTYaBAZkgy3F3gLTLmfzZV7dcvtHMwhv6ytiBQaZhbsUUFRTtYKnEdUYT+ Lvo5z+J0FezxG5SnS+JWa2D7Dm7ZZJr+2z9DROFWt438W3nB08oDv2sJLk8QrkUG URs59IYAK6b03zonCcyrAXidLtXOatnCusw8wbrNLRMs3sJIifheXd+MKK47FP+g yX4PTFyAlkemkopPoncJ7dwZ6+te9Y33kO9A7u7T4nrka6FrZu1EelaC3HmQZ4xk 0EYziZq0jNJQlLEKDBRZcFyjl8g11oYsUboEYkRZpfOHyBdgp5PzAKcI/bP6RnCF Wx19W1Yd =WgKS -----END PGP SIGNATURE-----

1 0

Vulnerabilities in Windows version
by Max Fillinger 20 Mar '24

20 Mar '24

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello! There are several vulnerabilities in the Windows version of OpenVPN and OpenVPN-NL. The vulnerabilities are as follows (descriptions copied from (https://openvpn.net/community-downloads/): * CVE-2024-27459: Windows: fix a possible stack overflow in the interactive service component which might lead to a local privilege escalation. Reported-by: Vladimir Tokarev <vtokarev(a)microsoft.com> * CVE-2024-24974: Windows: disallow access to the interactive service pipe from remote computers. Reported-by: Vladimir Tokarev <vtokarev(a)microsoft.com> * CVE-2024-27903: Windows: disallow loading of plugins from untrusted installation paths, which could be used to attack openvpn.exe via a malicious plugin. Plugins can now only be loaded from the OpenVPN install directory, the Windows system directory, and possibly from a directory specified by HKLM\SOFTWARE\OpenVPN\plugin_dir. Reported-by: Vladimir Tokarev <vtokarev(a)microsoft.com> * CVE-2024-1305: Windows TAP driver: Fix potential integer overflow in TapSharedSendPacket. Reported-by: Vladimir Tokarev <vtokarev(a)microsoft.com> We are in the process of preparing an OpenVPN-NL release to fix these vulnerabilities. Note that the local privilege escalations mentioned above require unprivileged users to edit OpenVPN plugin files. Please ensure that if you run OpenVPN-NL with plugins, non-admin users cannot edit those plugin files. I will let you now when we have the new release ready. Best regards, Max Fillinger -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEXj3Vjj5AbsDlPfHO5IsYow7qaagFAmX7OXUACgkQ5IsYow7q aahM4gv/T8sZ1gl3UErBMR/vuYiflbLkzObR4sGwC/Z3lpnUwDrmv2zyVBoWY9+o F+ug22LYMPaMuJPzm9chu139vRcCaPRo7/aRLk+kp6jeQ/LeENSwsvo4rB6DjKKJ phTS7jxftDI0aiJCH0UJVSA+b97YsM+BTEas25PpHdK+u45HlDgmr418F9Tvy8Pk Prek492Dds6uDuDzpCxikcntFS9THeprwQ396cXq7UJN3JZzgyYOFrBB8xkmKWCa 6Kc/CNmO4N2r546GDG+6lc1DXjgKbNhPhb4SiFzLj10o4KqmQBwSmceC1CqrTFqI yzTEoA+p4YYUGxLp0nWND8ZRR417US5qSfQ/fjsOPYKIlwIiH/8csieZ2Do5zbjo 3FHMXOuQkQUuZSKeEfdxhwkKRLveS0ctfATIbFStNc/TjOJWqC3em1iBGzfBst/U rNY2qd/afSV1xGNXWt1eFZLFUPpjHtIf1C7yTJzt9EdLcCHTYRO9CV8CX634oBkm zBUanAKt =2usT -----END PGP SIGNATURE-----

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

list-openvpn-nl