IrcMeetings

Basic info

Time: Wednesday 16 April 2025 at 14:00 CEST (12:00 UTC)
Place: #openvpn-meeting channel on LiberaChat IRC network

Topics

Closed: Release 2.6.14
This was released on April 2nd 2025 and addresses CVE-2025-2704.
Access Server 2.14.3 was released April 14th that has this version and fix in it.
Updated: DCO Linux upstreaming
Upstreaming DCO to Linux is proceeding, it is still in review phase but very close to being merge ready.
Sabrina has extensively reviewed and all items are now resolved and her reviewed-by blessing given.
Jakub is now reviewing and had a few comments and a patchset v26 was sent in yesterday to address these.
The tentative expectation is that once finally Jakub okays it, it may get merged.
Updated: Release 2.7
Unfortunately our initial goal to get 2.7 ready for the next Debian 13 release is not feasible.
Current estimates are to have all major code items in by May 1st and then a release on July 1st.
For DCO the plan is to take the DCO code that is being worked on to upstream to Linux kernel, and make it like a backport to go together with 2.7.
For changes to Windows service handling for 2.7, those changes have been made so openvpn can run nicely under a limited privileges account.
There is a party interested in doing a security audit of OpenVPN 2.7, there are some questions to be clarified about it being a code audit and/or testing.
SRLabs.de was the party chosen to do the audit.
Updated: forums situation
Situation in a nutshell; old forums got flooded with spam. attempt was made to make new forums to fix it. this was aborted. now we're in limbo.
We now have someone from OpenVPN Inc to help us fix it up, so we'll let him try.
Updated: new --dns option support
https://gerrit.openvpn.net/q/topic:%22dns+option%22
Implementation for unix-like has needed approvals but needs to go in. Windows implementation is done and in.
Currently work is being done on expanding the test framework to test the new DNS options - server-side of that is done, client side needs to comply.