<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Dear Users,</div><div><br></div><div>I have released version 4.42 of stunnel. This is a security bugfix release. Upgrade is highly recommended!</div><div><br></div><div>The ChangeLog entry:</div><div><br></div><div><div><div><div><div><div><div><div>Version 4.42, 2011.08.18, urgency: HIGH:</div><div>* New features</div><div> - New verify level 0 to request and ignore peer certificate. This</div><div> feature is useful with the new Windows GUI menu to save cached peer</div><div> certificate chains, as SSL client certificates are not sent by default.</div><div> - Manual page has been updated.</div><div> - Removed support for changing Windows Service name with "service" option.</div><div>* Bugfixes</div><div> - Fixed a heap corruption vulnerability in versions 4.40 and 4.41. It may</div><div> possibly be leveraged to perform DoS or remote code execution attacks.</div><div> - The -quiet commandline option was applied to *all* message boxes.</div><div> - Silent install (/S option) no longer attempts to create stunnel.pem.</div></div></div><div><br></div></div></div></div></div></div><div>Home page: <a href="http://stunnel.mirt.net/">http://www.stunnel.org/</a><br>Download: <a href="ftp://stunnel.mirt.net/stunnel/">ftp://ftp.stunnel.org/stunnel/</a></div><div><br></div><div><div>SHA-256 hash for stunnel-4.42.tar.gz:</div></div><div>d33c407bfc4f58070e818081bd082c38f91cab7691ccbb794da63143c535de3b</div><div><br></div><div>Best regards,</div><div><span class="Apple-tab-span" style="white-space: pre; "> </span>Mike</div></body></html>