Re: [BLFS Trac] #23695: stunnel-5.80

#23695: stunnel-5.80
-------------------------+-------------------------------
 Reporter:  Bruce Dubbs  |       Owner:  SecurityAdvisory
     Type:  enhancement  |      Status:  new
 Priority:  elevated     |   Milestone:  98-Security
Component:  BOOK         |     Version:  git
 Severity:  medium       |  Resolution:
 Keywords:               |
-------------------------+-------------------------------
Changes (by Joe Locash):

 * milestone:  13.1 => 98-Security
 * owner:  Joe Locash => SecurityAdvisory
 * priority:  normal => elevated
 * severity:  normal => medium
 * status:  assigned => new

Comment:

 {{{
 ### Version 5.80, 2026.08.04, urgency: HIGH
 * Security bugfixes
   - CVE-2026-70368: Fixed an out-of-bounds memory access triggered by
     logging attacker-controlled protocol messages longer than 1,024 bytes
     (thanks to AISLE Research and Clemens Lang).
   - CVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost
     destination filter using alternate local-address encodings and
     interface-scoped IPv6 destinations (thanks to AISLE Research and
     Clemens Lang).
   - Restricted Windows GUI/service control pipes to local clients.
 * Bugfixes
   - Fixed concurrent DTLS handshakes from clients sharing an IP address.
   - Fixed version reporting in builds from source.
   - Rejected stream-oriented protocol negotiation with the UDP transport
     during configuration validation.
 * Features
   - Added the "CRLcheckChain" service-level option for opt-in
     full-chain CRL verification.
 }}}
 Fixed at [sha:ab8d02c682]. Leaving open for SA.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23695#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page