Oval Definition:oval:org.opensuse.security:def:66826
Revision Date:2021-01-22Version:1
Title:Security update for stunnel (Moderate)
Description:

This update for stunnel fixes the following issues:

Security issue fixed:

- The 'redirect' option was fixed to properly handle 'verifyChain = yes' (bsc#1177580).

Non-security issues fixed:

- Fix startup problem of the stunnel daemon (bsc#1178533)

- update to 5.57: * Security bugfixes * New features - New securityLevel configuration file option. - Support for modern PostgreSQL clients - TLS 1.3 configuration updated for better compatibility. * Bugfixes - Fixed a transfer() loop bug. - Fixed memory leaks on configuration reloading errors. - DH/ECDH initialization restored for client sections. - Delay startup with systemd until network is online. - A number of testing framework fixes and improvements.

- update to 5.56: - Various text files converted to Markdown format. - Support for realpath(3) implementations incompatible with POSIX.1-2008, such as 4.4BSD or Solaris. - Support for engines without PRNG seeding methods (thx to Petr Mikhalitsyn). - Retry unsuccessful port binding on configuration file reload. - Thread safety fixes in SSL_SESSION object handling. - Terminate clients on exit in the FORK threading model.

- Fixup stunnel.conf handling: * Remove old static openSUSE provided stunnel.conf. * Use upstream stunnel.conf and tailor it for openSUSE using sed. * Don't show README.openSUSE when installing.

- enable /etc/stunnel/conf.d - re-enable openssl.cnf
Family:unixClass:patch
Status:Reference(s):1177580
1178533
CVE-2015-8869
CVE-2017-9772
CVE-2018-19416
CVE-2018-19517
CVE-2018-9838
CVE-2019-16167
CVE-2019-19725
Platform(s):SUSE Linux Enterprise Module for Development Tools 15 SP2
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Server Applications 15 SP2
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
  • AND Package Information
  • ocaml-4.05.0-13 is installed
  • OR ocaml-compiler-libs-4.05.0-13 is installed
  • OR ocaml-compiler-libs-devel-4.05.0-13 is installed
  • OR ocaml-ocamldoc-4.05.0-13 is installed
  • OR ocaml-runtime-4.05.0-13 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed
  • AND sysstat-isag-12.0.2-3.21 is installed
  • BACK