Security update for stunnel SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2021:0160-1 Final 1 1 2021-01-25T13:24:25Z current 2021-01-25T13:24:25Z 2021-01-25T13:24:25Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for stunnel This update for stunnel fixes the following issues: Security issue fixed: - The 'redirect' option was fixed to properly handle 'verifyChain = yes' (bsc#1177580). Non-security issues fixed: - Fix startup problem of the stunnel daemon (bsc#1178533) - update to 5.57: * Security bugfixes * New features - New securityLevel configuration file option. - Support for modern PostgreSQL clients - TLS 1.3 configuration updated for better compatibility. * Bugfixes - Fixed a transfer() loop bug. - Fixed memory leaks on configuration reloading errors. - DH/ECDH initialization restored for client sections. - Delay startup with systemd until network is online. - A number of testing framework fixes and improvements. - update to 5.56: - Various text files converted to Markdown format. - Support for realpath(3) implementations incompatible with POSIX.1-2008, such as 4.4BSD or Solaris. - Support for engines without PRNG seeding methods (thx to Petr Mikhalitsyn). - Retry unsuccessful port binding on configuration file reload. - Thread safety fixes in SSL_SESSION object handling. - Terminate clients on exit in the FORK threading model. - Fixup stunnel.conf handling: * Remove old static openSUSE provided stunnel.conf. * Use upstream stunnel.conf and tailor it for openSUSE using sed. * Don't show README.openSUSE when installing. - enable /etc/stunnel/conf.d - re-enable openssl.cnf This update was imported from the SUSE:SLE-15-SP2:Update update project. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-2021-160 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Q7XK4JAT2VTRMB2I2BVA3DY34276OGEH/ E-Mail link for openSUSE-SU-2021:0160-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1177580 SUSE Bug 1177580 https://bugzilla.suse.com/1178533 SUSE Bug 1178533 openSUSE Leap 15.2 stunnel-5.57-lp152.2.3.1 stunnel-doc-5.57-lp152.2.3.1 stunnel-5.57-lp152.2.3.1 as a component of openSUSE Leap 15.2 stunnel-doc-5.57-lp152.2.3.1 as a component of openSUSE Leap 15.2