very unsettling news on openvpn 2.3.0 thats included with the latest airvpn 1.8 , please check this out airvpn admin

[sunnymorning 1]

everybody donwgrade to 2.2.1 , apparently 2.2.2 up to 2.3.0 are having some sort of deep packet spyware or something the like in the latest openvpn versions , until this has been cleared id recommend airvpn to downgrade theyre openvpn clients back to 2.2.1 ,makes me wonder why airvpn even integrated the updated openvpn into 1.8 airvpn client package ,makes airvpns software security check policy abit questionable, do you guys ever check software before you use it for you client and spread it to your customers or not , id love to know , im abit concerned here , thank you that is all

https://forums.openvpn.net/topic10180.html

https://en.wikipedia.org/wiki/Fox-IT

http://www.expatica.com/nl/news/dutch-news/Police-should-have-more-powers-to-hack-into-computers-minister_247287.html

http://www.volkskrant.nl/vk/nl/2686/Binnenland/article/detail/3332430/2012/10/16/Bits-of-Freedom-hackplan-Opstelten-schokkend.dhtml

[Droopy 2]

Hi Admin could you please read the article in the link below and give your opinion please.

https://forums.openvpn.net/topic10180.html

[Staff 9972]

everybody donwgrade to 2.2.1 , apparently 2.2.2 up to 2.3.0 are having some sort of deep packet spyware

Hello!

As clarified in the very same thread you linked, that's totally false.

or something the like in the latest openvpn versions , until this has been cleared id recommend airvpn to downgrade theyre openvpn clients back to 2.2.1 ,makes me wonder why airvpn even integrated the updated openvpn into 1.8 airvpn client package

Either you provide the piece of code which, according to you, is a security threat, or you stop at once making such nasty insinuations. The new OpenVPN 2.3.0 solves many issues with Windows drivers and includes some new features which are useful. The stable version has been peer reviewed and such threat has not been found, as well as no other vulnerability. The source code is open so you can check yourself. As usual, you can use any OpenVPN version you like since 2.1.3 or higher.

,makes airvpns software security check policy abit questionable, do you guys ever check software before you use it for you client and spread it to your customers or not , id love to know , im abit concerned here , thank you that is all

Your message is questionable because it contains a false statement, not our security policy habit. Please prove your claim as soon as possible providing the piece of code or a clear description of a successful attack according to which you can prove the presence of your alleged backdoor or your message will be categorized as FUD and also as defamatory against OpenVPN community and against our team.

Regards

[Staff 9972]

Hi Admin could you please read the article in the link below and give your opinion please.

https://forums.openvpn.net/topic10180.html

Hello!

Basically the statements by Sommerseth hold and Yonan's analysis, as well as the OpenVPN community work and the peer-review of OpenVPN after 4 months from that thread, show that there's no such vulnerability neither on OpenVPN 2.2.x nor on OpenVPN 2.3.0. Additionally, Palatinux team members have proved unable to support their claims, even after a clear invitation to do so by Bakker from PolarSSL (see his message on the very same thread). Unless Palatinux provides evidence of their claims (and in 4 months they failed to do so), all the stuff is just an attempt to inject FUD (Fear, Uncertainty and Doubt) for purposes we are not willing to comment.

http://en.wikipedia.org/wiki/Fear,_uncertainty_and_doubt

Kind regards

[sunnymorning 1]

dont get me wrong was just trying to set this straight since this has been brought up by a colleague of mine and has set some concerns free , by no means do i mean harm or defaming any of the airvpn or openvpn team , as usual im just adding some interesting food for thought , and to make sure were all safe , thats the goal here , sorry if this message has been taken in the wrong manner wasnt my intention admin, you must understand it just scared the f out of me when i heard this , guess i can reinstall 2.3.0 now then i again i guess