Ukukhishwa kwe-OpenVPN 2.5.5 sekulungisiwe, iphakethe lokudala amanethiwekhi ayimfihlo abonakalayo akuvumela ukuthi uhlele ukuxhumana okubethelwe phakathi kwemishini yamaklayenti amabili noma unikeze iseva ye-VPN ephakathi nendawo ukuze kusebenze ngesikhathi esisodwa amaklayenti amaningana. Ikhodi ye-OpenVPN isatshalaliswa ngaphansi kwelayisensi ye-GPLv2, amaphakheji kanambambili enziwe ngomumo akhiqizelwa i-Debian, Ubuntu, CentOS, RHEL kanye ne-Windows.
Enguqulweni entsha
- Ukuyekiswa kokusebenza kwama-64-bit ciphers okungenzeka kube nokuhlasela kwe-SWEET32 kuhlehlisiwe kuze kube yigatsha 2.7.
- Inguqulo ye-Windows iqinisekisa ukuthi iseva ye-DHCP elingisiwe isebenzisa ikheli lenethiwekhi elizenzakalelayo, okwenza kube nokwenzeka ukusebenzisa i-subnet /30 edingekayo ukuze uxhume ku-OpenVPN Cloud.
- Izakhiwo ze-Windows zifaka phakathi ukusekelwa okuyisibopho kwama-algorithms wejika eliyi-elliptic (ikhono lokwakha nge-OpenSSL ngaphandle kokusekelwa kwe-elliptic curve linqanyuliwe).
- Uma yakhiwe kusetshenziswa i-MSVC compiler, ukuvikelwa kokugeleza komyalo (CFI, Control-Flow Integrity) nokuvikelwa ekuhlaselweni kwe-Specter class kunikwe amandla.
- Ngokwakhiwa kwe-Windows, ukulayishwa kwefayela lokumisa le-OpenSSL (%installdir%SSLopenssl.cfg) kubuyisiwe, okudingekayo ekusebenzeni kwamanye amathokheni wehadiwe adinga izilungiselelo ezikhethekile ze-OpenSSL.
Source: opennet.ru