comp-lzo deprecated on OpenVPN

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

comp-lzo deprecated on OpenVPN

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
comp-lzo deprecated on OpenVPN
comp-lzo deprecated on OpenVPN
2025-01-25 08:39:09
Model: Archer AX53   Archer AX73  
Hardware Version: V2
Firmware Version: 1.1.1 Build 20241031 rel.70279(5553)

Hello,

 

I own 1 Archer X73 and 3 X53 routers.

 

I purchased them because of openvpn.

 

I am a little dissapointed to see TPLinks bad support on OpenVPN with old and insecure versions.

 

I hope TPLink will upgrade this to latest openvpn.

 

Regards

0
0
#1
1 Reply
Re:comp-lzo deprecated on OpenVPN
2025-03-07 03:37:25 - last edited 2025-03-07 03:38:10

Hi @No_OpenVPN,

LZO compression has a VORACLE vulnerability (CVE-2019-14899), which can allow attackers to exploit compression features to decrypt traffic. It is recommended that you use the more general compress parameter instead.

 

Welcome to Our Community! Get the latest posts: △New Firmware for Archer GE550/GE650 V1 Introduces AI-QoS, EasyMesh IoT Expansion, and More! △New Firmware Releases for Archer BE805 V1/BE450 V1 to Support VPN Merge, New ECO Mode, and More! More posts, please see: △ Get the Ongoing Pre-release Firmware for Wi-Fi Routers Here— Subscribe for Updates! Urgent problems with your Wi-Fi Router, Range Extender, or DSL Modem? Please reach out via private Messages or @Joesph-TP in your new thread directly. Click Or ☆Recommended Solution if the post/answer helps.
0
0
#2