[GH-ISSUE #3233] Latest AmneziaWG app unfortunately ships with extremely old & insecure openvpn image - Alpine Linux 3.11.3 released on January 16, 2020 #1498

New issue

Open

opened 2026-10-13 20:43:52 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-13 20:43:52 +00:00

Owner

Originally created by @swooshbyc on GitHub (Sep 28, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/3233

Latest Amneziawg app unfortunately ships with extremely old openvpn image - Alpine Linux 3.11.3 released on January 16, 2020

The problem with that is it is a security risk. I'm aware these services are extra but we shouldn't ship outdated and vulnerable images and software. OpenVPN 2.4.8 instead of latest. OpenSSL from the 1.1.1-era, not OpenSSL 3.5.

I found this after I played around with adding partial PQC (not on authentication!!!) to the openvpn server config. I tried adding in the server and clients:

tls-groups X25519MLKEM768
tls-ciphersuites TLS_AES_256_GCM_SHA384

Doesn't work and it should work because these are standard, out of box options which latest openvpn supports.

Please update openvpn & any other connection methods to latest. Thank you team for your hard work

Originally created by @swooshbyc on GitHub (Sep 28, 2026). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/3233 Latest Amneziawg app unfortunately ships with extremely old openvpn image - **Alpine Linux 3.11.3 released on January 16, 2020** **The problem with that is it is a security risk.** I'm aware these services are extra but we shouldn't ship outdated and vulnerable images and software. OpenVPN 2.4.8 instead of latest. OpenSSL from the 1.1.1-era, not OpenSSL 3.5. I found this after I played around with adding partial PQC (not on authentication!!!) to the openvpn server config. I tried adding in the server and clients: ``` tls-groups X25519MLKEM768 tls-ciphersuites TLS_AES_256_GCM_SHA384 ``` Doesn't work and it should work because these are standard, out of box options which latest openvpn supports. **Please update openvpn & any other connection methods to latest. Thank you team for your hard work**

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

amnezia-vpn/amnezia-client#1498

No description provided.

Rows
Columns