comp-lzo deprecated on OpenVPN

comp-lzo deprecated on OpenVPN

comp-lzo deprecated on OpenVPN
comp-lzo deprecated on OpenVPN
2025-01-25 08:39:09
Model: Archer AX53   Archer AX73  
Hardware Version: V2
Firmware Version: 1.1.1 Build 20241031 rel.70279(5553)

Hello,

 

I own 1 Archer X73 and 3 X53 routers.

 

I purchased them because of openvpn.

 

I am a little dissapointed to see TPLinks bad support on OpenVPN with old and insecure versions.

 

I hope TPLink will upgrade this to latest openvpn.

 

Regards

  0      
  0      
#1
Options
1 Reply
Re:comp-lzo deprecated on OpenVPN
Friday - last edited Friday

Hi @No_OpenVPN,

LZO compression has a VORACLE vulnerability (CVE-2019-14899), which can allow attackers to exploit compression features to decrypt traffic. It is recommended that you use the more general compress parameter instead.

 

  0  
  0  
#2
Options