korektni izdaj paketa za ustvarjanje virtualnih zasebnih omrežij . V novi različici вulnerability (CVE-2020-11810), allowing a client's session to be transferred to a new IP address that hasn't been authorized previously. This issue can be exploited for a newly connected client at the stage when the peer-id has been formed, but the session key negotiation hasn't been completed (one client can disrupt sessions of other clients).
Med drugimi spremembami so:
- On the Windows platform, using search unicode strings in the option "—cryptoapicert" is allowed;
- Support for skipping expired certificates in the Windows certificate store is provided;
- Resolved an issue preventing the loading of multiple CRLs (Certificate Revocation Lists) contained in a single file when using the option "—crl-verify" on systems with OpenSSL;
- When using the option "—auth-user-pass file" with only a username present in the file for requesting a password, an interface for managing credentials is now required (the password prompt through OpenVPN console output has been discontinued);
- The order of checking user interactive services (in Windows, the configuration location is checked first, and then a request is sent to the domain controller) has been changed;
- Issues with building on the FreeBSD platform using the flag "—enable-async-push" have been resolved.
Izvor: opennet.ru
