Vulnerabilities cve-2021-3449 and cve-2021-3450

31 Mar
2021
31 Mar
'21
11:35 a.m.
Hi, Is there any chance that there will be a new stunnel version (windows) using openssl 1.1.1 k in order to be protected from at least vulnarability cve-2021-3449. And if so when can that be expected? Issue 3450 only concerns1.1.1 H-J so that is not a risk at this moment because the most recent Stunnel version is compiled against 1.1.1c.

31 Mar
31 Mar
2:05 p.m.
Hi Erik, On Wed, Mar 31 at 6:35 AM Erik Soudant wrote:> Issue 3450 only concerns1.1.1 H-J so that is not a risk at this moment because the most recent Stunnel version is compiled against 1.1.1c. Actually, the latest stunnel version 5.58 is compiled against OpenSSL 1.1.1j. So, it is affected by CVE-2021-3450.See https://www.stunnel.org/NEWS.html Regards, Jose
1610
Age (days ago)
1610
Last active (days ago)
1 comments
2 participants
participants (2)
-
erik.soudant@pinkroccade.nl
-
Jose Alf.