OpenVPN v2.7.2

v2.7.2
Added 2
  • Management interface permits input of very long passwords in base64-encoded multiline format
  • Signal support to management clients via management version 6
Changed 2
  • Improve error messages on --verify-x509-name failures
  • Improve error logging when overlong username or passwords cannot be written to TLS buffer
Fixed 3
  • Fix prompting for password from management interface when using a config file with inlined username and no password
  • Windows: fix DNSSEC flag handling due to bad comparison being always false
  • Windows: fix deinstallation progress bar on adapter deletion
Security 2
  • Fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances (CVE-2026-40215)
  • Fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key (CVE-2026-35058)
Security fixes:
  • CVE-2026-40215: fix race condition in TLS handshake that could lead to leaking of packet data from a previous handshake under specific circumstances
  • CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed packet with a valid tls-crypt-v2 key
New features:
  • management interface: permit input of very long passwords in base64-encoded multiline format. Signal support to management clients via "management version 6".
User-visible Changes:
  • improve error messages on --verify-x509-name failures
  • improve error logging when overlong username or passwords can not be written to TLS buffer
Bugfixes:
  • when using a config file with inlined username and no password, fix prompting for the password from management interface.
  • Windows: fix DNSSEC flag handling - this got never applied due to a bad comparison being always false.
  • Windows: fix deinstallation progress bar on adapter deletion.

For details see Changes.rst

Windows Client: Community MSI installer for Windows client can be found at Community Downloads.

Linux Packages: Instructions for installing community-maintained Linux packages can be found in the Community Wiki.

Full Changelog: https://github.com/OpenVPN/openvpn/compare/v2.7.1...v2.7.2

View original

Upgraded? How did it go?

Discussion