Ukukhishwa kokulungisa kwe-OpenVPN 2.5.3 sekulungisiwe, iphakheji lokudala amanethiwekhi ayimfihlo abonakalayo akuvumela ukuthi uhlele ukuxhumana okubethelwe phakathi kwemishini yamaklayenti amabili noma unikeze iseva ye-VPN ephakathi nendawo ukuze kusebenze ngesikhathi esisodwa amaklayenti amaningana. Ikhodi ye-OpenVPN isatshalaliswa ngaphansi kwelayisensi ye-GPLv2, amaphakheji kanambambili enziwe ngomumo akhiqizelwa i-Debian, Ubuntu, CentOS, RHEL ne-Windows.
Inguqulo entsha iqeda ukuba sengozini (CVE-2021-3606), okubonakala kuphela ekwakhiweni kwesikhulumi seWindows. Ukuba sengozini kuvumela ukulayishwa kwamafayela okulungiselelwa kwe-OpenSSL kusuka kunkhombandlela yenkampani yangaphandle ebhalekayo ukuze kushintshwe izilungiselelo zokubethela. Enguqulweni entsha, ukulayisha amafayela okumisa e-OpenSSL kukhutshazwe ngokuphelele.
Izinguquko ezingezona ezokuvikela zihlanganisa ukungezwa kwenketho ethi “--auth-token-user” (efana ne-“--auth-token”, kodwa ngaphandle kokusebenzisa “--auth-user-pass”), inqubo yokwakha ethuthukisiwe ye-Windows, ukwesekwa okuthuthukisiwe komtapo wezincwadi we-mbedtls kanye nezaziso ezibuyekeziwe ze-copyright ngekhodi (izinguquko zezimonyo).
Ukwengeza, singaqaphela ukuthi i-Opera ikhubaze i-VPN yayo kubasebenzisi baseRussia ngesicelo se-Roskomnadzor. Okwamanje, ukusebenza kwe-VPN kuyekile ukusebenza ku-beta nezinguqulo zonjiniyela zesiphequluli. I-Roskomnadzor ithi imikhawulo iyadingeka ukuze "kuphendule izinsongo zokweqa imingcele ekufinyeleleni izithombe zobulili ezingcolile zezingane, ukuzibulala, izidakamizwa nokunye okuqukethwe okungavunyelwe." Ngaphezu kwe-Opera VPN, ukuvinjwa kuphinde kwasetshenziswa kusevisi ye-VyprVPN.
Ngaphambilini, i-Roskomnadzor ithumele isexwayiso kumasevisi ayi-10 e-VPN enesidingo “sokuxhuma ohlelweni lolwazi lwezwe (FSIS)” ukuze kuvinjwe ukufinyelela ezinsizeni ezingavunyelwe eRussian Federation; I-Opera VPN ne-VyprVPN zaziphakathi kwazo. Izinsizakalo eziyi-9 kweziyi-10 azisinakanga isicelo noma zenqaba ukubambisana neRoskomnadzor (NordVPN, Hide My Ass!, Hola VPN, OpenVPN, VyprVPN, ExpressVPN, TorGuard, IPVanish, VPN Unlimited). Umkhiqizo we-Kaspersky Secure Connection kuphela owahlangabezana nezidingo.
Source: opennet.ru