Tokollo e lokisoang ea OpenVPN 2.5.3 e se e lokisitsoe, sephutheloana sa ho theha marang-rang a ikemetseng a ikemetseng a u lumellang ho hlophisa khokahano e patiloeng lipakeng tsa mechini e 'meli ea bareki kapa ho fana ka seva e bohareng ea VPN bakeng sa ts'ebetso ea nako e le' ngoe ea bareki ba 'maloa. Khoutu ea OpenVPN e ajoa tlasa laesense ea GPLv2, liphutheloana tsa binary tse seng li entsoe li etselitsoe Debian, Ubuntu, CentOS, RHEL le Windows.
Phetolelo e ncha e felisa ho ba kotsing (CVE-2021-3606), e hlahang feela moahong oa sethala sa Windows. Ho ba kotsing ho lumella ho kenya lifaele tsa tlhophiso ea OpenSSL ho tsoa ho li-directory tse ngoloang tsa motho oa boraro ho fetola litlhophiso tsa encryption. Mofuta o mocha, ho kenya lifaele tsa tlhophiso ea OpenSSL ho koetsoe ka botlalo.
Liphetoho tseo e seng tsa ts'ireletso li kenyelletsa kenyelletso ea khetho ea "-auth-token-user" (e ts'oanang le "--auth-token", empa ntle le ho sebelisa "-auth-user-pass"), ts'ebetso e ntlafalitsoeng ea kaho ea Windows, tšehetso e ntlafetseng bakeng sa laeborari ea mbedtls le litsebiso tse ntlafalitsoeng tsa litokelo tsa litokelo ka khoutu (liphetoho tsa litlolo).
Ho feta moo, re ka hlokomela hore Opera e holofalitse VPN ea eona bakeng sa basebelisi ba Russia ka kopo ea Roskomnadzor. Hajoale, ts'ebetso ea VPN e emisitse ho sebetsa ho beta le liphetolelo tsa sebatli. Roskomnadzor e pheha khang ea hore lithibelo lia hlokahala ho "araba litšokelo tsa ho qoba lithibelo mabapi le phihlello ea litšoantšo tsa bootsoa tsa bana, ho ipolaea, ho sebelisa lithethefatsi le litaba tse ling tse thibetsoeng." Ho phaella ho Opera VPN, thibelo e ne e boetse e sebelisoa ho tšebeletso ea VyprVPN.
Pejana, Roskomnadzor e ile ea fana ka temoso ho lits'ebeletso tse 10 tsa VPN ka tlhoko ea ho "hokahana le sistimi ea tlhahisoleseling ea mmuso (FSIS)" ho thibela phihlello ea lisebelisoa tse thibetsoeng Russia Federation; Opera VPN le VyprVPN li ne li le har'a tsona. Litšebeletso tse 9 ho tse 10 li hlokomolohile kopo kapa li hana ho sebelisana le Roskomnadzor (NordVPN, Hide My Ass!, Hola VPN, OpenVPN, VyprVPN, ExpressVPN, TorGuard, IPVanish, VPN Unlimited). Ke sehlahisoa sa Kaspersky Secure Connection feela se ileng sa finyella litlhoko.
Source: opennet.ru