| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Sat, 6 Aug 2016 14:10:50 -0700 (PDT) From: Slackware Security Team <security@...ckware.com> To: slackware-security@...ckware.com Subject: [slackware-security] stunnel (SSA:2016-219-04) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] stunnel (SSA:2016-219-04) New stunnel packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/stunnel-5.35-i586-1_slack14.2.txz: Upgraded. Fixes security issues: Fixed malfunctioning "verify = 4". Fixed incorrectly enforced client certificate requests. (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 13.0: ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/stunnel-5.35-i486-1_slack13.0.txz Updated package for Slackware x86_64 13.0: ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/stunnel-5.35-x86_64-1_slack13.0.txz Updated package for Slackware 13.1: ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/stunnel-5.35-i486-1_slack13.1.txz Updated package for Slackware x86_64 13.1: ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/stunnel-5.35-x86_64-1_slack13.1.txz Updated package for Slackware 13.37: ftp://ftp.slackware.com/pub/slackware/slackware-13.37/patches/packages/stunnel-5.35-i486-1_slack13.37.txz Updated package for Slackware x86_64 13.37: ftp://ftp.slackware.com/pub/slackware/slackware64-13.37/patches/packages/stunnel-5.35-x86_64-1_slack13.37.txz Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/stunnel-5.35-i486-1_slack14.0.txz Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/stunnel-5.35-x86_64-1_slack14.0.txz Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/stunnel-5.35-i486-1_slack14.1.txz Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/stunnel-5.35-x86_64-1_slack14.1.txz Updated package for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/stunnel-5.35-i586-1_slack14.2.txz Updated package for Slackware x86_64 14.2: ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/stunnel-5.35-x86_64-1_slack14.2.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/stunnel-5.35-i586-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/stunnel-5.35-x86_64-1.txz MD5 signatures: +-------------+ Slackware 13.0 package: f851d47b2bb8fdd6e5562c0233aa51ee stunnel-5.35-i486-1_slack13.0.txz Slackware x86_64 13.0 package: 3bc7b74e15d29224a7934b1e3ae1be3f stunnel-5.35-x86_64-1_slack13.0.txz Slackware 13.1 package: bde3b85dfe6532a7605fb562c7111db0 stunnel-5.35-i486-1_slack13.1.txz Slackware x86_64 13.1 package: 14d11556b9c655a8694a7a9ea2cf7c73 stunnel-5.35-x86_64-1_slack13.1.txz Slackware 13.37 package: ee18b740a0c8e409f3645330017a968e stunnel-5.35-i486-1_slack13.37.txz Slackware x86_64 13.37 package: b3da66494d731dc8c3a14ecaaa51b80a stunnel-5.35-x86_64-1_slack13.37.txz Slackware 14.0 package: 5ef90d639d3fb228230a5ca81eb3f9cd stunnel-5.35-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 3caeb94a85e1ea088380a4e2adb67368 stunnel-5.35-x86_64-1_slack14.0.txz Slackware 14.1 package: eb9368942b21022941d942958e36be6b stunnel-5.35-i486-1_slack14.1.txz Slackware x86_64 14.1 package: 7119ca1b4fb29c2ba5259e7424e1463c stunnel-5.35-x86_64-1_slack14.1.txz Slackware 14.2 package: 27813f43047b8fd5a1938b9941e5ce82 stunnel-5.35-i586-1_slack14.2.txz Slackware x86_64 14.2 package: fca9ace8551711035e751e1c28d59bce stunnel-5.35-x86_64-1_slack14.2.txz Slackware -current package: f61ddcd459e12ef76181f54bfafc214b n/stunnel-5.35-i586-1.txz Slackware x86_64 -current package: e9afb09f40a8d944912214d3b5c946d2 n/stunnel-5.35-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg stunnel-5.35-i586-1_slack14.2.txz +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security@...ckware.com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@...ckware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlemPawACgkQakRjwEAQIjMTEACgkT7Qt60v03yWtJfr7DffQnrL DvYAoJJiFD/zdj+NJO7bceU6kkrO9k2W =QtRX -----END PGP SIGNATURE-----
Powered by blists - more mailing lists