This was released on April 2nd 2025 and addresses CVE-2025-2704.\
-
Access Server 2.14.3 was released April 14th that has this version and fix in it.
-
-
* **Updated: DCO Linux upstreaming**\
-
Upstreaming DCO to Linux is proceeding, it is still in review phase but very close to being merge ready.\
-
Sabrina has extensively reviewed and all items are now resolved and her reviewed-by blessing given.\
-
Jakub is now reviewing and had a few comments and a patchset v26 was sent in yesterday to address these.\
+
- **Closed: Release 2.6.14**
+
This was released on April 2nd 2025 and addresses CVE-2025-2704.
+
Access Server 2.14.3 was released April 14th that has this version and fix in it.
+
+
- **Updated: DCO Linux upstreaming**
+
Upstreaming DCO to Linux is proceeding, it is still in review phase but very close to being merge ready.
+
Sabrina has extensively reviewed and all items are now resolved and her reviewed-by blessing given.
+
Jakub is now reviewing and had a few comments and a patchset v26 was sent in yesterday to address these.
The tentative expectation is that once finally Jakub okays it, it may get merged.
-
* **Updated: Release 2.7**\
-
Unfortunately our initial goal to get 2.7 ready for the next Debian 13 release is not feasible.\
-
Current estimates are to have all major code items in by May 1st and then a release on July 1st.\
-
For DCO the plan is to take the DCO code that is being worked on to upstream to Linux kernel, and make it like a backport to go together with 2.7.\
-
For changes to Windows service handling for 2.7, those changes have been made so openvpn can run nicely under a limited privileges account.\
-
There is a party interested in doing a security audit of OpenVPN 2.7, there are some questions to be clarified about it being a code audit and/or testing.\
-
SRLabs.de was the party chosen to do the audit.
-
-
* **Updated: forums situation**\
-
Situation in a nutshell; old forums got flooded with spam. attempt was made to make new forums to fix it. this was aborted. now we're in limbo.\
-
We now have someone from OpenVPN Inc to help us fix it up, so we'll let him try.
Implementation for unix-like has needed approvals but needs to go in. Windows implementation is done and in.\
+
- **Updated: Release 2.7**
+
Unfortunately our initial goal to get 2.7 ready for the next Debian 13 release is not feasible.
+
Current estimates are to have all major code items in by May 1st and then a release on July 1st.
+
For DCO the plan is to take the DCO code that is being worked on to upstream to Linux kernel, and make it like a backport to go together with 2.7.
+
For changes to Windows service handling for 2.7, those changes have been made so openvpn can run nicely under a limited privileges account.
+
There is a party interested in doing a security audit of OpenVPN 2.7, there are some questions to be clarified about it being a code audit and/or testing.
+
SRLabs.de was the party chosen to do the audit.
+
+
- **Updated: forums situation**
+
Situation in a nutshell; old forums got flooded with spam. attempt was made to make new forums to fix it. this was aborted. now we're in limbo.
+
We now have someone from OpenVPN Inc to help us fix it up, so we'll let him try.
