BSD Ports

net/openvpn 2.7.8 OpenBSD

easy-to-use, robust, and highly configurable VPN

System
OpenBSD
Repository
OpenBSD ports
Maintainer
Jeremie Courreges-Anglas <[email protected]>
Last update
Commit
0862dffa64
Categories
net, security

Description

OpenVPN is an easy-to-use, robust, highly configurable, cross-platform VPN (Virtual Private Network) daemon which can be used to securely link two or more private networks using an encrypted tunnel over the internet.

It can forward a tun(4) interface over a single UDP or TCP port with support for NAT, dynamic endpoints, compression, fragmentation and keep- alive. It uses OpenSSL's encryption, authentication, and certification features, with static keys, certificates or TLS-based key exchange.

Flavors: mbedtls - use mbedTLS instead of LibreSSL

In the other systems

SystemPortVersion
OpenBSDnet/openvpn2.7.8
FreeBSDsecurity/openvpn2.7.8
NetBSDnet/openvpn2.7.7
DragonFlysecurity/openvpn2.6.14
MidnightBSDsecurity/openvpn2.6.14_1

Install

Binary package:

pkg_add openvpn

From the ports tree:

cd /usr/ports/net/openvpn && make install

Dependencies

Build dependencies 3
Run dependencies 3

Commit history 4

DateCommitCreditsLog message
0862dffa64 jca SECURITY update to openvpn-2.7.8
Issues that affect us: 1. Check for NULL-Bytes in certificate subjects - refuse all such certificates now as "invalid" (CVE-2026-84790). 2. options: fix unsigned underflow when clearing domain_search_list (CVE-2026-88964) Full ChangeLog: https://github.com/OpenVPN/openvpn/blob/v2.7.8/Changes.rst
ebd512f4d9 jca SECURITY update to openvpn-2.7.7
https://github.com/OpenVPN/openvpn/blob/v2.7.7/Changes.rst Likely relevant for us: reliability layer: Avoid unbounded reliable TLS timeout (CVE-2026-84732) reliability layer: Ignore acks for packets that cannot be outstanding (CVE-2026-84732)
722ab84b72 jca SECURITY update to openvpn-2.7.6
The only relevant security issue is considered rather low and implies the use of --x509-username-field with the mbedtls flavor. More details: https://github.com/OpenVPN/openvpn/blob/v2.7.6/Changes.rst
53d27c4c37 jca SECURITY update to openvpn-2.7.5
Several issues, full list at https://github.com/OpenVPN/openvpn/blob/v2.7.5/Changes.rst