[stunnel-announce] stunnel 5.02 released

Michal Trojnara Michal.Trojnara at mirt.net
Mon Jun 9 14:50:37 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Users,

I have released version 5.02 of stunnel.

The ChangeLog entry:

Version 5.02, 2014.06.09, urgency: HIGH:
* Security bugfixes
  - OpenSSL DLLs updated to version 1.0.1h.
    See http://www.openssl.org/news/secadv_20140605.txt
* New features
  - Major rewrite of the protocol.c interface: it is now possible to
    add protocol negotiations at multiple connection phases,
    protocols can individually decide whether the remote connection
    will be established before or after SSL/TLS is negotiated.
  - Heap memory blocks are wiped before release.  This only works for
    block allocated by stunnel, and not by OpenSSL or other libraries.
  - The safe_memcmp() function implemented with execution time not
    dependent on the compared data.
  - Updated the stunnel.conf and stunnel.init templates.
  - Added a client-mode example to the manual.
* Bugfixes
  - Fixed "failover = rr" broken since version 5.00.
  - Fixed "taskbar = no" broken since version 5.00.
  - Compilation fix for missing SSL_OP_MSIE_SSLV2_RSA_PADDING option.

Home page: https://www.stunnel.org/
Download:  https://www.stunnel.org/downloads.html

SHA-256 hashes:
c258b71d7f82bba5b0a4ccc69fbda632f1fefe9108589a92aa1016f33985973e
stunnel-5.02.tar.gz
2125bf8e9241cb9f7969cb74f8409ce77f2c49e1390d363aa46bc436b9d908aa
stunnel-5.02-installer.exe
f962a2f4a0e16f07ff10339066ec89d7686734dcabba88654f2e71da4f658529
stunnel-5.02-android.zip

Best regards,
    Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlOVrZkACgkQ/NU+nXTHMtHBIQCfefzazgvECg8p4qoHgsMjw/KM
gTQAoM0mYm+S7exolJjiBBfSlx2G8Rjn
=hyr4
-----END PGP SIGNATURE-----


More information about the stunnel-announce mailing list