stunnel 5.58 released

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--4PcplL3HRGlCInCYkMvR81epHsGJWiYWs
Content-Type: multipart/mixed; boundary="0zSVAQiXyKFb3vQB6dJpMvdVVY02YD2wH";
 protected-headers="v1"
From: =?UTF-8?Q?Micha=c5=82_Trojnara?= <[email protected]>
To: [email protected], [email protected],
 [email protected]
Message-ID: <04a92b38-679b-88af-3bed-29499d93bcd1-qit4X2J3Z2JAfugRpC6u6w@public.gmane.org>
Subject: stunnel 5.58 released

--0zSVAQiXyKFb3vQB6dJpMvdVVY02YD2wH
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Language: en-US

Dear Users,

I have released version 5.58 of stunnel.

This release fixes another security bug in the "redirect" option.

### Version 5.58, 2021.02.20, urgency: HIGH
* Security bugfixes
 =C2=A0 - The "redirect" option was fixed to properly handle
 =C2=A0=C2=A0=C2=A0 unauthenticated requests (thx to Martin Stein).
 =C2=A0 - Fixed a double free with OpenSSL older than 1.1.0 (thx to
 =C2=A0=C2=A0=C2=A0 Petr Strukov).
 =C2=A0 - OpenSSL DLLs updated to version 1.1.1j.
* New features
 =C2=A0 - New 'protocolHeader' service-level option to insert custom
 =C2=A0=C2=A0=C2=A0 'connect' protocol negotiation headers.=C2=A0 This fe=
ature can
 =C2=A0=C2=A0=C2=A0 be used to impersonate other software (e.g. web brows=
ers).
 =C2=A0 - 'protocolHost' can also be used to control the client SMTP
 =C2=A0=C2=A0=C2=A0 protocol negotiation HELO/EHLO value.
 =C2=A0 - Initial FIPS 3.0 support.
* Bugfixes
 =C2=A0 - X.509v3 extensions required by modern versions of OpenSSL
 =C2=A0=C2=A0=C2=A0 are added to generated self-signed test certificates.=

 =C2=A0 - Fixed a tiny memory leak in configuration file reload
 =C2=A0=C2=A0=C2=A0 error handling (thx to Richard K=C3=B6nning).
 =C2=A0 - Merged Debian 05-typos.patch (thx to Peter Pentchev).
 =C2=A0 - Merged with minor changes Debian 06-hup-separate.patch
 =C2=A0=C2=A0=C2=A0 (thx to Peter Pentchev).
 =C2=A0 - Merged Debian 07-imap-capabilities.patch (thx to Ansgar).
 =C2=A0 - Merged Debian 08-addrconfig-workaround.patch (thx to Peter
 =C2=A0=C2=A0=C2=A0 Pentchev).
 =C2=A0 - Fixed tests on the WSL2 platform.
 =C2=A0 - NSIS installer updated to version 3.06 to fix a multiuser
 =C2=A0=C2=A0=C2=A0 installation bug on some platforms, including 64-bit =
XP.
 =C2=A0 - Fixed engine initialization (thx to Petr Strukov).
 =C2=A0 - FIPS TLS feature is reported when a provider or container
 =C2=A0=C2=A0=C2=A0 is available, and not when FIPS control API is availa=
ble.

Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html

SHA-256 hashes:
d4c14cc096577edca3f6a2a59c2f51869e35350b3988018ddf808c88e5973b79 stunnel-=
5.58.tar.gz
92055a006a0d178a25cc29ef681ae32d4cea3075c096abc893c92ba6285d6908 stunnel-=
5.58-win64-installer.exe
57c313ee8b42da42265b33fb91555a58c1f1b94f5e93a389c310e37a87f2013c stunnel-=
5.58-android.zip

Best regards,
 =C2=A0=C2=A0=C2=A0 Mike





--0zSVAQiXyKFb3vQB6dJpMvdVVY02YD2wH--

--4PcplL3HRGlCInCYkMvR81epHsGJWiYWs
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----
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=qgD+
-----END PGP SIGNATURE-----

--4PcplL3HRGlCInCYkMvR81epHsGJWiYWs--