From Michal.Trojnara at mobi-com.net Sat May 3 22:51:28 2008 From: Michal.Trojnara at mobi-com.net (Michal Trojnara) Date: Sat, 3 May 2008 22:51:28 +0200 Subject: [stunnel-announce] stunnel 4.23 released Message-ID: <200805032251.45216.Michal.Trojnara@mobi-com.net> Dear Users, I have just released a new version of stunnel. Please find below the ChangeLog entry: Version 4.23, 2008.05.03, urgency: HIGH: * Bugfixes - Local privilege escalation bug on Windows NT based systems fixed. A local user could exploit stunnel running as a service to gain localsystem privileges. Home page/download: http://stunnel.mirt.net/ sha1sum for stunnel-4.23.tar.gz file: d0fef8b518a44b9623692381a53680e0b4b01686 Best regards, Mike -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part. Url : http://stunnel.mirt.net/pipermail/stunnel-announce/attachments/20080503/22fb2adb/attachment.pgp From Michal.Trojnara at mobi-com.net Mon May 19 14:36:49 2008 From: Michal.Trojnara at mobi-com.net (=?UTF-8?Q?Micha=C5=82_Trojnara?=) Date: Mon, 19 May 2008 14:36:49 +0200 Subject: [stunnel-announce] stunnel 4.24 released In-Reply-To: References: Message-ID: Dear Users, I have just released a new version of stunnel, which fixes a security issue in the OCSP functionality. The bug allows a revoked certificate to successfully authenticate. Any installations with OCSP enabled should be upgraded ASAP. Other users are not affected. Home page/download: http://stunnel.mirt.net/ sha1sum for stunnel-4.24.tar.gz file: ec6db4080199d11e020b780da0f1cc37d37d9233 Best regards, Mike