This was released on April 2nd 2025 and addresses CVE-2025-2704.

Access Server 2.14.3 was released April 14th that has this version and fix in it.

- **Updated: DCO Linux upstreaming**

Upstreaming DCO to Linux is proceeding, it is still in review phase but very close to being merge ready.

Sabrina has extensively reviewed and all items are now resolved and her reviewed-by blessing given.

Jakub is now reviewing and had a few comments and a patchset v26 was sent in yesterday to address these.

Unfortunately our initial goal to get 2.7 ready for the next Debian 13 release is not feasible.

Current estimates are to have all major code items in by May 1st and then a release on July 1st.

For DCO the plan is to take the DCO code that is being worked on to upstream to Linux kernel, and make it like a backport to go together with 2.7.

For changes to Windows service handling for 2.7, those changes have been made so openvpn can run nicely under a limited privileges account.

There is a party interested in doing a security audit of OpenVPN 2.7, there are some questions to be clarified about it being a code audit and/or testing.

SRLabs.de was the party chosen to do the audit.

- **Updated: forums situation**

Situation in a nutshell; old forums got flooded with spam. attempt was made to make new forums to fix it. this was aborted. now we're in limbo.

We now have someone from OpenVPN Inc to help us fix it up, so we'll let him try.

- **Updated: new --dns option support**

https://gerrit.openvpn.net/q/topic:%22dns+option%22

Implementation for unix-like has needed approvals but needs to go in. Windows implementation is done and in.