Tunnelblick 3.8.8c and 4.0.0beta07 and 3.5.26 are now available for download

46 views

Skip to first unread message

Tunnelblick Developer

unread,

Aug 2, 2023, 1:59:37 PM8/2/23

to tunnelblick-announce

SECURITY UPDATE: Tunnelblick 3.8.8c, 4.0.0beta07 and 3.5.26 are now available for download.

Changes from 4.0.0beta06 to 4.0.0beta07 (SECURITY UPDATE)

Fixes several security vulnerabilities. See Assisted Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities.
Warns if updated or modified configurations may run scripts.
Includes OpenVPN 2.6.5, replacing 2.6.4. See Changes in OpenVPN 2.6.
Includes OpenSSL 1.1.1v, replacing 1.1.1u. See OpenSSL 1.1.1 Series Release Notes.
Includes OpenSSL 3.0.10, replacing 3.0.9. See OpenSSL 3.0 Series Release Notes.
Fixes problems with some TAP connections.
Fixes problems if a macOS string manipulation method fails.
Fixes a problem determining the username when using Tunnelblick's installer from the command line.

Changes from 3.8.8b to 3.8.8c (SECURITY UPDATE)

Fixes several security vulnerabilities. See Assisted Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities.
Warns if converted, updated, or modified configurations may run scripts.
Includes OpenVPN 2.6.5, replacing 2.6.4. See Changes in OpenVPN 2.6.
Includes OpenSSL 1.1.1v, replacing 1.1.1u. See OpenSSL 1.1.1 Series Release Notes.
Discontinues migrating old file layout to 'new' (new 10 years ago) layout.
Discontinues converting .ovpn and .conf files found in Tunnelblick's standard folder to Tunnelblick VPN Configurations.

Changes from 3.5.25 to 3.5.26 (SECURITY UPDATE)

NOTE: This is a security update for an old version of Tunnelblick. It should be used only on OS X 10.4 - 10.7.4. On OS X 10.7.5 and higher, the latest stable or beta version from the Downloads page should be used.
Fixes several security vulnerabilities. See Assisted Local Privilege Escalation and Arbitrary File Overwrite Vulnerabilities.
Includes lzo 2.10, replacing 2.08.
Warns that updated or modified configurations may run scripts.
Discontinues migrating old file layout to 'new' (new 10 years ago) layout.
Discontinues converting .ovpn and .conf files found in Tunnelblick's standard folder to Tunnelblick VPN Configurations.