* Fix issue in handling DCO messages on Linux that could lead to various problems due to unhandled messages
* Fix issues with DHCP on Windows with tap driver
-
For a list of all changes see the [git log](https://github.com/OpenVPN/openvpn/compare/v2.7_alpha2...v2.7_alpha3).
+
For a list of all changes in Alpha 3 changes see the [git log](https://github.com/OpenVPN/openvpn/compare/v2.7_alpha2...v2.7_alpha3).
-
Highlights of 2.7 include:
-
* Multi-socket support for servers -- Handle multiple addresses/ports/protocols within one server
-
* Improved Client support for DNS options
-
* Client implementations for Linux/BSD/macOS, included with the default install
-
* New client implementation for Windows, adding support for features like split DNS and DNSSEC
-
* Architectural improvements on Windows
-
* The `block-local` flag is now enforced with WFP filters
-
* Windows network adapters are now generated on demand
-
* Windows automatic service now runs as an unpriviledged user
-
* Support for server mode in win-dco driver
-
* Note: Support for the wintun driver has been removed. win-dco is now the default, tap-windows6 is the fallback solution for use-cases not covered by win-dco.
-
* Improved data channel
-
* Enforcement of AES-GCM usage limit
-
* Epoch data keys and packet format
-
* Support for new upstream DCO Linux kernel module
-
* This release supports the new `ovpn` DCO Linux kernel module which will be available in future upstream Linux kernel releases. Backports of the new module to current kernels are available via the [ovpn-backports project](https://github.com/OpenVPN/ovpn-backports).
-
* Client-side support for new `PUSH_UPDATE` control-channel message
-
* This allows servers to send updates to options like routing and DNS config without triggering a reconnect.
-
* TLS 1.3 support with bleeding-edge mbedTLS versions
-
-
For details see [Changes.rst](https://github.com/OpenVPN/openvpn/blob/v2.7_alpha3/Changes.rst)
+
For details about 2.7 features see [Changes.rst](https://github.com/OpenVPN/openvpn/blob/v2.7_alpha3/Changes.rst)
Windows MSI changes since 2.7_alpha3:
* win-dco driver updated from 2.5.9 to 2.6.2
@@ 58,7 38,9 @@
New feature since 2.7_alpha1:
* TLS 1.3 support with bleeding-edge mbedTLS versions
-
For details see [Changes.rst](https://github.com/OpenVPN/openvpn/blob/v2.7_alpha2/Changes.rst)
+
For a list of all changes in Alpha 2 changes see the [git log](https://github.com/OpenVPN/openvpn/compare/v2.7_alpha1...v2.7_alpha2).
+
+
For details about 2.7 features see [Changes.rst](https://github.com/OpenVPN/openvpn/blob/v2.7_alpha2/Changes.rst)
Windows MSI changes since 2.7_alpha1:
* Includes fix for [CVE-2025-50054](https://www.cve.org/CVERecord?id=CVE-2025-50054)
