Private Internet Access is not affected by recently discovered OpenVPN security vulnerabilities
On June 21st, 2017, Private Internet Access was made aware of an OpenVPN post-audit bug report written by Guido Vranken which highlights some previously undisclosed vulnerabilities and issues with OpenVPN 2.4.2 that have since been patched. Upon learning of the vulnerabilities, we subsequently checked all of our applications. We’re pleased to announce that we’re not affected by any of those issues and have donated $1,000 USD in bitcoin to Guido Vranken to support his ongoing security research.
We would like to thank Guido Vranken for taking the time and effort to find and document these security flaws since research such as this is beneficiary to the security community; furthermore, we recognize that work like this is a hallmark of the open source community which we wholeheartedly support.Private Internet Access encourages any kind of external audit of our products and the technologies that we use - and reward bounties with our Whitehat Alert Security Program (WASP).