Ukukhutshwa kokulungiswa kwe-OpenVPN 2.5.3 kulungiselelwe, iphakheji yokudala amanethiwekhi angasese abucala avumela ukuba uququzelele uxhulumaniso olufihliweyo phakathi koomatshini ababini abaxumi okanye unikeze iseva ye-VPN ephakathi ekusebenzeni ngaxeshanye kwabathengi abaninzi. Ikhowudi ye-OpenVPN isasazwa phantsi kwelayisenisi ye-GPLv2, iipakethe zokubini esele zenziwe ziveliswa iDebian, Ubuntu, CentOS, RHEL kunye neWindows.
Inguqulelo entsha isusa ubuthathaka (CVE-2021-3606), ebonakala kuphela kulwakhiwo lweqonga leWindows. Ubuthathaka buvumela ukulayishwa kweefayile zoqwalaselo ze-OpenSSL ukusuka kwiqela lesithathu lezalathisi ezibhalweyo ukuze utshintshe useto loguqulelo oluntsonkothileyo. Kuhlobo olutsha, ukulayisha iifayile zoqwalaselo ze-OpenSSL kuvaliwe ngokupheleleyo.
Utshintsho olungakhuselekanga lubandakanya ukongezwa kwenketho "--auth-token-user" (efana ne "--auth-token", kodwa ngaphandle kokusebenzisa "-auth-user-pass"), inkqubo ephuculweyo yokwakha yeWindows, inkxaso ephuculweyo yelayibrari ye-mbedtls kunye nezaziso ezihlaziyiweyo zelungelo lokushicilela kwikhowudi (utshintsho lwezithambiso).
Ukongezelela, sinokuqaphela ukuba i-Opera ikhubaze i-VPN yayo kubasebenzisi baseRashiya ngesicelo seRoskomnadzor. Okwangoku, ukusebenza kweVPN kuyekile ukusebenza kwi-beta kunye neenguqulelo zomphuhlisi wesikhangeli. I-Roskomnadzor ithi izithintelo ziyimfuneko "ukusabela kwizoyikiso zokuthintela izithintelo ekufikeleleni kwimifanekiso engamanyala yabantwana, ukuzibulala, iziyobisi kunye neminye imixholo engavumelekanga." Ukongeza kwi-Opera VPN, ukuvinjelwa kwasetyenziswa kwinkonzo yeVyprVPN.
Ngaphambili, i-Roskomnadzor yathumela isilumkiso kwiinkonzo ze-VPN ezili-10 kunye nemfuneko "yokuxhuma kwinkqubo yolwazi lukarhulumente (FSIS)" ukuvala ukufikelela kwimithombo engavumelekanga kwi-Russian Federation; I-Opera VPN kunye ne-VyprVPN zaziphakathi kwazo. I-9 kwiinkonzo ze-10 zingayinaki isicelo okanye zinqabile ukusebenzisana neRoskomnadzor (NordVPN, Hide My Ass!, Hola VPN, OpenVPN, VyprVPN, ExpressVPN, TorGuard, IPVanish, VPN Unlimited). Kuphela imveliso yoQhagamshelwano oluKhuselekileyo lweKaspersky yadibana neemfuno.
umthombo: opennet.ru