A corrective release of OpenVPN 2.5.1 has been prepared, a package for creating virtual private networks that allows for the organization of an encrypted connection between two client machines or enables the operation of a centralized VPN server for simultaneous operation of multiple clients. The OpenVPN code is distributed under the GPLv2 license, with ready binary packages being formed for Debian, Ubuntu, CentOS, RHEL, and Windows.
New Features:
- A new connection state AUTH_PENDING has been added to the list of connection states, allowing for a more accurate representation of the connection state in the interface.
- A preliminary version of the documentation for the 'Management Interface echo protocol' has been prepared, which is the command transfer channel in the GUI.
- Support for inetd has been removed.
- Support for EKM (Exported Keying Material, RFC 5705) has been added to obtain vectors for encryption/hmac/iv (data channel keys). The previous mechanism remains unchanged.
Key Fixes:
- A memory leak in mode server in the tls-crypt-v2 module (approximately 600 bytes per connecting client) has been eliminated.
- A memory leak in the net_iface_mtu_set() function (Linux) has been eliminated.
- A potential heap corruption error and crash of the client child process when using the registerdns option (Windows) has been fixed.
- Wintun does not support DHCP. Now the DHCP renew is only started for TAP-Windows6 (Windows).
Source: opennet.ru
