[stunnel-users] Re: Vulnerabilities cve-2021-3449 and cve-2021-3450

Hi Erik,

On Wed, Mar 31 at 6:35 AM Erik Soudant wrote:> Issue 3450 only concerns1.1.1 H-J so that is not a risk at this moment because the most recent Stunnel version is compiled against 1.1.1c. Actually, the latest stunnel version 5.58 is compiled against OpenSSL 1.1.1j. So, it is affected by CVE-2021-3450.See https://www.stunnel.org/NEWS.html

Regards, Jose