Viscosity For Mac & Windows: Version 1.11.1 - SparkLabs
Summary
To help support the transition to OpenVPN 2.6, which was introduced in Viscosity 1.11, the "ncp-disable" command will now be automatically removed from VPN connections. On the Windows side, this update addresses two issues that could arise during enterprise deployments: identities loaded from the Local Machine certificate store will now be correctly detected, and Single Adapter Mode will no longer create additional virtual network adapters under some circumstances. Finally, this update also addresses two low-severity security issues in third-party components: Sparkle (on macOS) which is used for automatic updates, and the Legacy OpenVPN TAP Adapter (on Windows) which is an optional VPN adapter driver. This isnt considered to be exploitable due to other validation methods, however it nevertheless is an important additional security layer. The Legacy OpenVPN TAP Adapter update addresses an issue that could allow an attacker to trigger an integer overflow and crash the driver.