Home A - Z
Page Index

An Otter Wiki

Commit 76927e

2025-04-02 17:21:23 uddr: Downloads 2.6.14 release
Downloads.md ..
@@ 1,3 1,40 @@
+ ## OpenVPN 2.6.14 -- Released 02 April 2025
+ The OpenVPN community project team is proud to release OpenVPN 2.6.14. This is a bugfix release containing one security fix.
+
+ For details see [Changes.rst](https://github.com/OpenVPN/openvpn/blob/v2.6.14/Changes.rst)
+
+ Security fixes:
+
+ * [CVE-2025-2704](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-2704): fix possible `ASSERT()` on OpenVPN servers using `--tls-crypt-v2`
+ Security scope: OpenVPN servers between 2.6.1 and 2.6.13 using
+ `--tls-crypt-v2` can be made to abort with an `ASSERT()` message by
+ sending a particular combination of authenticated and malformed packets.
+ To trigger the bug, a valid tls-crypt-v2 client key is needed, or
+ network observation of a handshake with a valid tls-crypt-v2 client key.
+ No crypto integrity is violated, no data is leaked, and no remote
+ code execution is possible.
+ This bug does not affect OpenVPN clients.
+ (Bug found by internal QA at OpenVPN Inc)
+
+ Bug fixes:
+
+ * Linux DCO: repair source IP selection for `--multihome` (Qingfang Deng)
+
+ Windows MSI changes since 2.6.13:
+ * Built against OpenSSL 3.4.1
+ * Included openvpn-gui updated to 11.52.0.0
+ * Use correct `%TEMP%` directory for debug log file.
+ * Disable config in menu listing if its ovpn file becomes inaccessible (github [openvpn-gui#729](https://github.com/OpenVPN/openvpn-gui/issues/729))
+
+ | | | |
+ |-|-|-|
+ |**Windows 64-bit MSI installer**|[GnuPG Signature](https://swupdate.openvpn.org/community/releases/OpenVPN-2.6.14-I001-amd64.msi.asc)|[OpenVPN-2.6.14-I001-amd64.msi](https://swupdate.openvpn.org/community/releases/OpenVPN-2.6.14-I001-amd64.msi)|
+ |**Windows ARM64 MSI installer**|[GnuPG Signature](https://swupdate.openvpn.org/community/releases/OpenVPN-2.6.14-I001-arm64.msi.asc)|[OpenVPN-2.6.14-I001-arm64.msi](https://swupdate.openvpn.org/community/releases/OpenVPN-2.6.14-I001-arm64.msi)|
+ |**Windows 32-bit MSI installer**|[GnuPG Signature](https://swupdate.openvpn.org/community/releases/OpenVPN-2.6.14-I001-x86.msi.asc)|[OpenVPN-2.6.14-I001-x86.msi](https://swupdate.openvpn.org/community/releases/OpenVPN-2.6.14-I001-x86.msi)|
+ |**Source archive file**|[GnuPG Signature](https://swupdate.openvpn.org/community/releases/openvpn-2.6.14.tar.gz.asc)|[openvpn-2.6.14.tar.gz](https://swupdate.openvpn.org/community/releases/openvpn-2.6.14.tar.gz)|
+
+ For Community-maintained packages for Linux distributions see OpenvpnSoftwareRepos
+
## OpenVPN 2.6.13 -- Released 15 January 2025
The OpenVPN community project team is proud to release OpenVPN 2.6.13. This is a bugfix release.
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9