[Buildroot] [PATCH] package/stunnel: security bump to 5.80
Waldemar Brodkorb <[email protected]>
| Newsgroups | net.busybox.buildroot |
|---|---|
| Message-ID | <[email protected]> |
Fixes following CVE's: CVE-2026-70368: Fixed an out-of-bounds memory access triggered by logging attacker-controlled protocol messages longer than 1,024 bytes (thanks to AISLE Research and Clemens Lang). CVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost destination filter using alternate local-address encodings and interface-scoped IPv6 destinations (thanks to AISLE Research and Clemens Lang). Complete Changelog is here: https://www.stunnel.org/NEWS.html Signed-off-by: Waldemar Brodkorb <[email protected]> --- package/stunnel/stunnel.hash | 4 ++-- package/stunnel/stunnel.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/stunnel/stunnel.hash b/package/stunnel/stunnel.hash index 572f226861..f966e19f05 100644 --- a/package/stunnel/stunnel.hash +++ b/package/stunnel/stunnel.hash @@ -1,5 +1,5 @@ -# From https://www.stunnel.org/archive/5.x/stunnel-5.78.tar.gz.sha256 -sha256 8727e53bb8b7528f850327a2a149158422c02183bc120d1d733cc65b1e2c349d stunnel-5.78.tar.gz +# From https://www.stunnel.org/archive/5.x/stunnel-5.80.tar.gz.sha256 +sha256 6d0841d48de07cbbaf4a055919065bf7bb5ebc63cc15c97a2c76caa2bf285513 stunnel-5.80.tar.gz # Locally calculated sha256 716f18b10eac3f1875ea2205418dd1b0084bd210bd17d615df6b180cfc4d65b6 COPYING.md sha256 62f171d4d8b6726df61f18a6bbc0a70f79c4bc2134d837d35c81fc6289a2d84d COPYRIGHT.md diff --git a/package/stunnel/stunnel.mk b/package/stunnel/stunnel.mk index ef93dc6073..a8eb652bff 100644 --- a/package/stunnel/stunnel.mk +++ b/package/stunnel/stunnel.mk @@ -4,7 +4,7 @@ # ################################################################################ -STUNNEL_VERSION = 5.78 +STUNNEL_VERSION = 5.80 STUNNEL_SITE = https://www.stunnel.org/archive/5.x STUNNEL_DEPENDENCIES = host-pkgconf openssl STUNNEL_CONF_OPTS = --with-ssl=$(STAGING_DIR)/usr --with-threads=fork \ -- 2.47.3 _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot