OpenVPN CVE

Started by Lucas P, April 05, 2025, 07:07:19 AM

Previous topic - Next topic
Is OPNsense affected. Seems that it's not using Tls-crypt-v2 when you configure the vpn via the gui

https://www.cve.org/CVERecord?id=CVE-2025-2704
(Unoffial Community) OPNsense Telegram Group: https://t.me/joinchat/0o9JuLUXRFpiNmJk

We currently don't offer the option indeed (https://github.com/search?q=repo%3Aopnsense%2Fcore%20tls-crypt-v2&type=code)


FWIW, 25.1.5 scheduled for Thursday has the new OpenVPN version.


Cheers,
Franco