Blame
| fe3618 | novaflash | 2025-11-19 12:58:16 | 1 | # Basic info |
| 2 | ||||
| 3 | * Time: Wednesday 19 November 2025 at 14:00 CEST (12:00 UTC) |
|||
| 4 | * Place: #openvpn-meeting channel on !LiberaChat IRC network |
|||
| 5 | ||||
| 6 | # Topics |
|||
| 7 | ||||
| 8 | - **Updated: Release 2.7** |
|||
| 9 | OpenVPN 2.7rc2 went out containing among other things 2 CVE fixes. |
|||
| 10 | CVE-2025-12106: IPv6 address parsing: fix buffer overread on invalid input |
|||
| 11 | CVE-2025-13086: HMAC verification check: fix incorrect memcmp() call |
|||
| 12 | The latter of these two also applies to the 2.6 branch, therefore a 2.6.16 release was done. |
|||
| 13 | ||||
| 14 | - **Updated: Release 2.6.16** |
|||
| 15 | Some of the issues for 2.7 also affected 2.6 code, therefore 2.6.16 with a fix for a CVE issue was released. |
|||
| 16 | CVE-2025-13086: HMAC verification check: fix incorrect memcmp() call |
|||
| 17 | ||||
| ab41eb | novaflash | 2025-11-19 13:14:38 | 18 | - **Updated: 2.7 security audit** |
| fe3618 | novaflash | 2025-11-19 12:58:16 | 19 | ordex arranged mostly through STF funding to get a security audit of OpenVPN 2.7 (currently in release candidate phase). |
| 20 | Recently this has kicked off and 2.7 is being put through the meat grinder now by SRLabs. |
|||
| ab41eb | novaflash | 2025-11-19 13:14:38 | 21 | We are processing these reports as well as reports from ZeroPath and addressing concerns raised. |
| fe3618 | novaflash | 2025-11-19 12:58:16 | 22 | |
| 5fbe93 | novaflash | 2025-11-19 13:34:33 | 23 | - **Updated: t_server and t_client testing framework** |
| 24 | mattock asked where to put the t_server stack as it is currently on ordex's open source fund funded AWS account but funds might dry up there. |
|||
| 25 | Discussed option to move it to OpenVPN Inc. funded AWS community account. Will explore this option. |
|||
| 26 | ||||
| fe3618 | novaflash | 2025-11-19 12:58:16 | 27 | - **community meetup 2026** |
| 28 | Tentatively in Paderborn, Germany. |
|||
| 29 | ||||
| 30 | - **forums situation** |
|||
| 31 | minx from OpenVPN Inc. originally set up flarum and started migration process, but he left the company before completion. |
|||
| 32 | Now we have eduardo at OpenVPN Inc. who is taking a look and he managed to get migration working. |
|||
| 33 | He suggests some further migration testing, and to then plan a hard cutover date. |
|||
| 83b440 | novaflash | 2025-11-26 12:57:14 | 34 | Current time schedule somewhere in November or December. |