stunnel 5.55 released

Michał Trojnara <[email protected]> Mon, 10 Jun 2019 18:09:32 +0200
Newsgroups	gmane.network.stunnel.announce
Message-ID	<fe332081-d25c-b37d-9995-a278ad5345ed__44168.2068676286$1560183071$gmane$org@stunnel.org>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============7374352507483763525==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="1lEahRaKSdDt8OP6zOlv8eT0d7nV2ki8r"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--1lEahRaKSdDt8OP6zOlv8eT0d7nV2ki8r
Content-Type: multipart/mixed; boundary="39OHv9p2drXY8jN6ZkZwAMwt0lu0NthY8";
 protected-headers="v1"
From: =?UTF-8?Q?Micha=c5=82_Trojnara?= <[email protected]>
To: [email protected], [email protected],
 [email protected]
Message-ID: <[email protected]>
Subject: stunnel 5.55 released

--39OHv9p2drXY8jN6ZkZwAMwt0lu0NthY8
Content-Type: multipart/alternative;
 boundary="------------FE69E3DD4E72EED0FC0AA74F"
Content-Language: en-US-large

This is a multi-part message in MIME format.
--------------FE69E3DD4E72EED0FC0AA74F
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Dear Users,

I have released version 5.55 of stunnel.
This release addresses a number of important Windows issues, including
security vulnerabilities.

Version 5.55, 2019.06.10, urgency: HIGH
* Security bugfixes
=C2=A0 - Fixed a Windows local privilege escalation vulnerability
=C2=A0=C2=A0=C2=A0 caused insecure OpenSSL cross-compilation defaults.
=C2=A0=C2=A0=C2=A0 Successful exploitation requires stunnel to be deploye=
d
=C2=A0=C2=A0=C2=A0 as a Windows service, and user-writable C:\ folder. Th=
is
=C2=A0=C2=A0=C2=A0 vulnerability was discovered and reported by Rich Mirc=
h.
=C2=A0 - OpenSSL DLLs updated to version 1.1.1c.
* Bugfixes
=C2=A0 - Implemented a workaround for Windows hangs caused by its
=C2=A0=C2=A0=C2=A0 inability to the monitor the same socket descriptor fr=
om
=C2=A0=C2=A0=C2=A0 multiple threads.
=C2=A0 - Windows configuration (including cryptographic keys)
=C2=A0=C2=A0=C2=A0 is now completely removed at uninstall.
=C2=A0 - A number of testing framework fixes and improvements.

Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html

SHA-256 hashes:
90de69f41c58342549e74c82503555a6426961b29af3ed92f878192727074c62=C2=A0
stunnel-5.55.tar.gz
e586b68da9e4faedf41cbcc8378402d7b188bb25b1f0f3cd1f2ce68620ef9e29=C2=A0
stunnel-5.55-win64-installer.exe
7af80d424986149629aad7d75710400f58ba259042c58557adf743627b5c8e3c=C2=A0
stunnel-5.55-android.zip

Best regards,
=C2=A0=C2=A0=C2=A0 Mike


--------------FE69E3DD4E72EED0FC0AA74F
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html>
  <head>

    <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF=
-8">
  </head>
  <body text=3D"#000000" bgcolor=3D"#FFFFFF">
    Dear Users,<br>
    <br>
    I have released version 5.55 of stunnel.<br>
    This release addresses a number of important Windows issues,
    including security vulnerabilities.<br>
    <p>Version 5.55, 2019.06.10, urgency: HIGH<br>
      * Security bugfixes<br>
      =C2=A0 - Fixed a Windows local privilege escalation vulnerability<b=
r>
      =C2=A0=C2=A0=C2=A0 caused insecure OpenSSL cross-compilation defaul=
ts.<br>
      =C2=A0=C2=A0=C2=A0 Successful exploitation requires stunnel to be d=
eployed<br>
      =C2=A0=C2=A0=C2=A0 as a Windows service, and user-writable C:\ fold=
er. This<br>
      =C2=A0=C2=A0=C2=A0 vulnerability was discovered and reported by Ric=
h Mirch.<br>
      =C2=A0 - OpenSSL DLLs updated to version 1.1.1c.<br>
      * Bugfixes<br>
      =C2=A0 - Implemented a workaround for Windows hangs caused by its<b=
r>
      =C2=A0=C2=A0=C2=A0 inability to the monitor the same socket descrip=
tor from<br>
      =C2=A0=C2=A0=C2=A0 multiple threads.<br>
      =C2=A0 - Windows configuration (including cryptographic keys)<br>
      =C2=A0=C2=A0=C2=A0 is now completely removed at uninstall.<br>
      =C2=A0 - A number of testing framework fixes and improvements.<br>
    </p>
    Home page: <a class=3D"moz-txt-link-freetext" href=3D"https://www.stu=
nnel.org/">https://www.stunnel.org/</a><br>
    Download: <a class=3D"moz-txt-link-freetext" href=3D"https://www.stun=
nel.org/downloads.html">https://www.stunnel.org/downloads.html</a><br>
    <br>
    SHA-256 hashes:<br>
    <tt>90de69f41c58342549e74c82503555a6426961b29af3ed92f878192727074c62=C2=
=A0
      stunnel-5.55.tar.gz</tt><tt><br>
    </tt><tt>e586b68da9e4faedf41cbcc8378402d7b188bb25b1f0f3cd1f2ce68620ef=
9e29=C2=A0
      stunnel-5.55-win64-installer.exe</tt><tt><br>
    </tt><tt>7af80d424986149629aad7d75710400f58ba259042c58557adf743627b5c=
8e3c=C2=A0
      stunnel-5.55-android.zip</tt>
    <p>Best regards,<br>
      =C2=A0=C2=A0=C2=A0 Mike<br>
    </p>
  </body>
</html>

--------------FE69E3DD4E72EED0FC0AA74F--

--39OHv9p2drXY8jN6ZkZwAMwt0lu0NthY8--

--1lEahRaKSdDt8OP6zOlv8eT0d7nV2ki8r
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=UUE4
-----END PGP SIGNATURE-----

--1lEahRaKSdDt8OP6zOlv8eT0d7nV2ki8r--

--===============7374352507483763525==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
stunnel-announce mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-announce

--===============7374352507483763525==--