Dear Users,
I have released version 4.50 of stunnel.
The ChangeLog entry:
Version 4.50, 2011.12.03, urgency: MEDIUM:
* New features
- Added Android port.
- Updated INSTALL.FIPS.
* Bugfixes
- Fixed internal memory allocation problem in inetd mode.
- Fixed FIPS mode on Microsoft Vista, Server 2008, and Windows 7.
This fix required to compile OpenSSL FIPS-compliant DLLs with
MSVC 9.0,
instead of MSVC 10.0. msvcr100.dll was replaced with msvcr90.dll.
GPL compatibility issues are explained in the GPL FAQ:
http://www.gnu.org/licenses/gpl-faq.html#WindowsRuntimeAndGPL
- POP3 server-side protocol negotiation updated to report STLS
capability (thx to Anthony Morgan).
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.50.tar.gz:
933467009529bae4f338bb20e758e0ea20b0759130e7695ea2193c4f270e5eaf
Best regards,
Mike
Dear Users,
I have released version 4.49 of stunnel.
The ChangeLog entry:
Version 4.49, 2011.11.28, urgency: MEDIUM:
* Bugfixes
- Missing Microsoft Visual C++ Redistributable (msvcr100.dll)
required
by FIPS-compliant OpenSSL library was added to the Windows
installer.
- A bug was fixed causing crashes on MacOS X and some other
platforms.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.49.tar.gz:
dcb0e1f21e9fcf56f4d67bc7a5a4ef8720845b61063a749953417db2616cb20d
Best regards,
Mike
Dear Users,
I have released version 4.48 of stunnel.
The ChangeLog entry:
Version 4.48, 2011.11.26, urgency: MEDIUM:
* New features
- FIPS support on Win32 platform added. OpenSSL 0.9.8r DLLs based on
FIPS 1.2.3 canister are included with this version of stunnel.
FIPS
mode can be disabled with "fips = no" configuration file option.
* Bugfixes
- Fixed canary initialization problem on Win32 platform.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.48.tar.gz:
9fa723595726806cbf6547a2c453e695e33bf635f2d4771e80d110a06f27ea37
Best regards,
Mike
Dear Users,
I have released version 4.47 of stunnel.
This version includes a number of important bugfixes.
The ChangeLog entry:
Version 4.47, 2011.11.21, urgency: MEDIUM:
* Internal improvements
- CVE-2010-3864 workaround improved to check runtime version of
OpenSSL
rather than compiled version, and to allow OpenSSL 0.x.x >= 0.9.8p.
- Encoding of man page sources changed to UTF-8.
* Bugfixes
- Handling of socket/SSL close in transfer() function was fixed.
- Logging was modified to save and restore system error codes.
- Option "service" was restricted to Unix, as since stunnel 4.42 it
wasn't doing anything useful on Windows platform.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.47.tar.gz:
0b70f8bad8b6963e6154606571a83a3f0e0dea88d7dbd7e3b83cde5a07dd95ae
Best regards,
Mike
Dear Users,
I have released version 4.46 of stunnel.
The ChangeLog entry:
Version 4.46, 2011.11.04, urgency: LOW:
* New features
- Added Unix socket support (e.g. "connect = /var/run/stunnel/
socket").
- Added "verify = 4" mode to ignore CA chain and only verify peer
certificate.
- Removed the limit of 16 IP addresses for a single 'connect' option.
- Removed the limit of 256 stunnel.conf sections in PTHREAD
threading model.
It is still not possible have more than 63 sections on WIN32
platform.
http://msdn.microsoft.com/en-us/library/windows/desktop/ms740141(v=vs.85).a…
* Optimizations
- Reduced per-connection memory usage.
- Performed a major refactoring of internal data structures.
Extensive
internal testing was performed, but some regression bugs are
expected.
* Bugfixes
- Fixed WIN32 compilation with Mingw32.
- Fixed non-blocking API emulation layer in UCONTEXT threading model.
- Fixed signal handling in UCONTEXT threading model.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.46.tar.gz:
8ea8943bdfcd74a2e66dc00d4ed17b402bbd39d040a125901534f6f4308da99d
Best regards,
Mike
Dear Users,
I have released version 4.45 of stunnel.
The ChangeLog entry:
Version 4.45, 2011.10.24, urgency: LOW:
* New features
- "protocol = proxy" support to send original client IP address to
haproxy:
http://haproxy.1wt.eu/download/1.5/doc/proxy-protocol.txt
This requires accept-proxy bind option of haproxy 1.5-dev3 or
later.
- Added Win32 configuration reload without a valid configuration
loaded.
- Added compatibility with LTS OpenSSL versions 0.9.6 and 0.9.7.
Some features are only available in OpenSSL 1.0.0 and later.
* Performance optimizations
- Use SSL_MODE_RELEASE_BUFFERS if supported by the OpenSSL library.
- Libwrap helper processes are no longer started if libwrap is
disabled
in all sections of the configuration file.
* Internal improvements
- Protocol negotiation framework was rewritten to support additional
code to be executed after SSL_accept()/SSL_connect().
- Handling of memory allocation errors was rewritten to gracefully
terminate the process (thx to regenrecht for the idea).
* Bugfixes
- Fixed -l option handling in stunnel3 script (thx to Kai Gülzau).
- Script to build default stunnel.pem was fixed (thx to Sebastian
Kayser).
- MinGW compilation script (mingw.mak) was fixed (thx to Jose Alf).
- MSVC compilation script (vc.mak) was fixed.
- A number of problems in WINSOCK error handling were fixed.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.45.tar.gz:
cbce8279c1ba7a07bfefeb2e477f682bfd326519f8a7ed296e35210599898a2d
Best regards,
Mike
Dear Users,
I have released version 4.44 of stunnel.
The ChangeLog entry:
Version 4.44, 2011.09.17, urgency: MEDIUM:
* New features
- Major automake/autoconf cleanup.
- Heap buffer overflow protection with canaries.
- Stack buffer overflow protection with -fstack-protector.
* Bugfixes
- Fixed garbled error messages on errors with setuid/setgid options.
- SNI fixes (thx to Alexey Drozdov).
- Use after free in fdprintf() (thx to Alexey Drozdov).
This issue might cause GPF with "protocol" or "ident" options.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.44.tar.gz:
fa0dfc33f323abfbc94aa993d90d37481cd2f652ee93ec2f8c333ac7a496c7b9
Best regards,
Mike
Dear Users,
I have released version 4.43 of stunnel.
The ChangeLog entry:
Version 4.43, 2011.09.07, urgency: MEDIUM:
* New features
- Updated Win32 DLLs for OpenSSL 1.0.0e.
- Major optimization of the logging subsystem.
Benchmarks indicate up to 15% performance improvement.
* Bugfixes
- Fixed WIN32 configuration file reload.
- Fixed FORK and UCONTEXT threading models.
- Corrected INSTALL.W32 file.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.43.tar.gz:
93a002d9e1652d7684756af75b44b00f99aa93574e8a5a2e69f88656221d5ce2
Best regards,
Mike
Dear Users,
I have released version 4.42 of stunnel. This is a security bugfix
release. Upgrade is highly recommended!
The ChangeLog entry:
Version 4.42, 2011.08.18, urgency: HIGH:
* New features
- New verify level 0 to request and ignore peer certificate. This
feature is useful with the new Windows GUI menu to save cached peer
certificate chains, as SSL client certificates are not sent by
default.
- Manual page has been updated.
- Removed support for changing Windows Service name with "service"
option.
* Bugfixes
- Fixed a heap corruption vulnerability in versions 4.40 and 4.41.
It may
possibly be leveraged to perform DoS or remote code execution
attacks.
- The -quiet commandline option was applied to *all* message boxes.
- Silent install (/S option) no longer attempts to create
stunnel.pem.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.42.tar.gz:
d33c407bfc4f58070e818081bd082c38f91cab7691ccbb794da63143c535de3b
Best regards,
Mike
Dear Users,
I have released version 4.41 of stunnel. This is a bugfix release. I
highly recommend Windows users to upgrade.
The ChangeLog entry:
Version 4.41, 2011.07.25, urgency: MEDIUM:
* Bugfixes
- Fixed Windows service crash of stunnel 4.40.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.41.tar.gz:
08e0e7df42bfb8b8551eb6c4b5b50eae6051aaf75077101d729e67c7a3a00c72
Best regards,
Mike
