Antivirus Free contains insecure component

AVG Protection
6

…no response on this for six days now.  Some idea of if/when AVG will fix the insecure version of OpenVPN, or mechanism by which users can fix it would be appreciated.

Cheers,  Dave

1

AVG Antivirus Free yesterday updated itself to Vn 17.3.3011 and installed an insecure version (2.3.10.0) of OpenVPN (in C:\Program Files (x86)\AVG\Antivirus\OpenVPN), according to Secunia PSI.  Does AVG intend to update this anytime soon to a secure version, (2.4.1… appears to be current) or is this user-updateable?

5

Dave, User Andrew Savage… Same issue posted (https://support.avg.com/answers?id=906b0000000DhYjAAK).
AVG Guru

3

…no response on this for six days now.  Some idea of if/when AVG will fix the insecure version of OpenVPN, or mechanism by which users can fix it would be appreciated.

Cheers,  Dave

4

Hi Alan - certainly this relates to a similar issue, except that OpenVPN Vn 2.3.10.0 is not only out-of-date, it is INSECURE (buffer overflow and DoS issues, according to Secunia PSI).

That an AVG security product has introduced an insecure element should surely be of some concern to its creators. (?)

An indication of when it will be addressed, or a pointer to a user fix/replacement of the flawed version of OpenVPN would be helpful

All the best,  Dave C

2

Dave, User Andrew Savage… Same issue posted (https://support.avg.com/answers?id=906b0000000DhYjAAK).
AVG Guru