OpenVPN 2.7.2 released
Yuriy Darnobyt <[email protected]> Wed, 22 Apr 2026 23:31:20 +0300
| Newsgroups | gmane.network.openvpn.announce |
|---|---|
| Message-ID | <F9AC0F13-BA48-414B-8BC3-53408FB9AD41__2097.45358895219$1776892080$gmane$org@openvpn.com> |
--===============9069470255354422648== Content-Type: multipart/alternative; boundary="Apple-Mail=_EC2D08B3-B605-4229-97FA-B537E3710FFB" --Apple-Mail=_EC2D08B3-B605-4229-97FA-B537E3710FFB Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii The OpenVPN community project team is proud to release OpenVPN 2.7.2. This is a bugfix release containing security fixes. Security fixes: * CVE-2026-40215: fix race condition in TLS handshake that could lead to = leaking of packet data from a previous handshake under specific circumstances * CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed = packet with a valid tls-crypt-v2 key New features: * management interface: permit input of very long passwords in base64-encoded multiline format. Signal support to management clients via "management version 6". User-visible Changes: * improve error messages on ``--verify-x509-name`` failures * improve error logging when overlong username or passwords can not be written to TLS buffer Bugfixes: * when using a config file with inlined username and no password, fix prompting for the password from management interface. * Windows: fix DNSSEC flag handling - this got never applied due to a bad comparison being always false. * Windows: fix deinstallation progress bar on adapter deletion. Windows MSI changes since 2.7.1: * Built against OpenSSL 3.6.2 * Included openvpn-gui updated to 11.63.0.0 * Translation cleanup. Remove obsolete strings related to support for = OpenVPN < 2.0 * Translation updates. More details can be found in the Changes document: <https://github.com/OpenVPN/openvpn/blob/v2.7.2/Changes.rst = <https://github.com/OpenVPN/openvpn/blob/v2.7./Changes.rst>> Source code and Windows installers can be downloaded from our download = page: <https://openvpn.net/community/> Packages for Debian, Ubuntu, Fedora, RHEL, and openSUSE are available in = the various official Community repositories: <https://community.openvpn.net/Pages/OpenVPN%20software%20repos>= --Apple-Mail=_EC2D08B3-B605-4229-97FA-B537E3710FFB Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html aria-label=3D"message body"><head><meta http-equiv=3D"content-type" = content=3D"text/html; charset=3Dus-ascii"></head><body = style=3D"overflow-wrap: break-word; -webkit-nbsp-mode: space; = line-break: after-white-space;"><div>The OpenVPN community project team = is proud to release OpenVPN 2.7.2.</div><div>This is a bugfix release = containing security = fixes.</div><div><br></div><div><br></div><div>Security = fixes:</div><div><br></div><div>* CVE-2026-40215: fix race condition in = TLS handshake that could lead to leaking of</div><div> packet data = from a previous handshake under specific circumstances</div><div>* = CVE-2026-35058: fix server ASSERT() on receiving a suitably malformed = packet with</div><div> a valid tls-crypt-v2 = key</div><div><br></div><div>New features:</div><div><br></div><div>* = management interface: permit input of very long passwords = in</div><div> base64-encoded multiline format. Signal = support to management</div><div> clients via "management version = 6".</div><div><br></div><div>User-visible = Changes:</div><div><br></div><div>* improve error messages on = ``--verify-x509-name`` failures</div><div>* improve error logging when = overlong username or passwords can not</div><div> be written to = TLS buffer</div><div><br></div><div>Bugfixes:</div><div><br></div><div>* = when using a config file with inlined username and no = password,</div><div> fix prompting for the password from = management interface.</div><div>* Windows: fix DNSSEC flag handling - = this got never applied due to</div><div> a bad comparison being = always false.</div><div>* Windows: fix deinstallation progress bar on = adapter deletion.</div><div><br></div><div>Windows MSI changes since = 2.7.1:</div><div>* Built against OpenSSL 3.6.2</div><div>* Included = openvpn-gui updated to 11.63.0.0</div><div> * Translation cleanup. = Remove obsolete strings related to support for OpenVPN < = 2.0</div><div> * Translation updates.</div><br>More details can be = found in the Changes document:<br><br><<a = href=3D"https://github.com/OpenVPN/openvpn/blob/v2.7./Changes.rst">https:/= /github.com/OpenVPN/openvpn/blob/v2.7.2/Changes.rst</a>><br><br>Source = code and Windows installers can be downloaded from our download = page:<br><br><<a = href=3D"https://openvpn.net/community/">https://openvpn.net/community/</a>= ><br><br>Packages for Debian, Ubuntu, Fedora, RHEL, and openSUSE are = available in the various<br>official Community = repositories:<br><br><<a = href=3D"https://community.openvpn.net/Pages/OpenVPN%20software%20repos">ht= tps://community.openvpn.net/Pages/OpenVPN%20software%20repos</a>></body= ></html>= --Apple-Mail=_EC2D08B3-B605-4229-97FA-B537E3710FFB-- --===============9069470255354422648== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============9069470255354422648== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Openvpn-announce mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-announce --===============9069470255354422648==--