Kutulutsidwa koyenera kwa OpenVPN 2.5.3 kwakonzedwa, phukusi lopangira maukonde achinsinsi omwe amakulolani kuti mukonzekere kulumikizana kwachinsinsi pakati pa makina awiri a kasitomala kapena kupereka seva yapakati ya VPN kuti igwire ntchito nthawi imodzi yamakasitomala angapo. Khodi ya OpenVPN imagawidwa pansi pa layisensi ya GPLv2, mapaketi a binary okonzeka amapangidwira Debian, Ubuntu, CentOS, RHEL ndi Windows.
Mtundu watsopanowu umachotsa chiwopsezo (CVE-2021-3606), chomwe chimangowoneka pakumanga kwa nsanja ya Windows. Chiwopsezochi chimalola kutsitsa mafayilo osinthira a OpenSSL kuchokera pamawu olembedwa a gulu lachitatu kuti asinthe ma encryption. Mu mtundu watsopano, kutsitsa mafayilo a OpenSSL kumayimitsidwa kwathunthu.
Kusintha kopanda chitetezo kumaphatikizaponso kuwonjezera njira ya "--auth-token-user" (yofanana ndi "--auth-token", koma osagwiritsa ntchito "-auth-user-pass"), njira yomangira yabwino ya Windows, kuthandizira bwino laibulale ya mbedtls ndi Zidziwitso Zosinthidwa za kukopera mu code (zosintha zodzikongoletsera).
Kuphatikiza apo, titha kuzindikira kuti Opera yayimitsa VPN yake kwa ogwiritsa ntchito aku Russia popempha Roskomnadzor. Pakadali pano, magwiridwe antchito a VPN adasiya kugwira ntchito mumitundu ya beta ndi otukula asakatuli. Roskomnadzor akuti zoletsazo ndizofunikira kuti "tithane ndi ziwopsezo zoletsa zoletsa zowonera zolaula za ana, kudzipha, kugwiritsa ntchito mankhwala osokoneza bongo ndi zina zoletsedwa." Kuphatikiza pa Opera VPN, kutsekerezako kudagwiritsidwanso ntchito pa ntchito ya VyprVPN.
M'mbuyomu, Roskomnadzor idatumiza chenjezo ku mautumiki 10 a VPN ndi lamulo loti "agwirizane ndi dongosolo lazidziwitso la boma (FSIS)" kuti aletse kupeza zinthu zoletsedwa ku Russia; Opera VPN ndi VyprVPN anali ena mwa iwo. 9 mwa mautumiki a 10 ananyalanyaza pempho kapena anakana kugwirizana ndi Roskomnadzor (NordVPN, Hide My Ass!, Hola VPN, OpenVPN, VyprVPN, ExpressVPN, TorGuard, IPVanish, VPN Unlimited). Chokhachokha cha Kaspersky Secure Connection ndi chomwe chinakwaniritsa zofunikira.
Source: opennet.ru