[Buildroot] [PATCH 1/2] package/stunnel: security bump to version 5.55

Peter Korsgaard peter at korsgaard.com
Sun Jul 14 10:11:56 UTC 2019


>>>>> "Pierre-Jean" == Pierre-Jean Texier <pjtexier at koncepto.io> writes:

 > See https://www.stunnel.org/ChangeLog.md.html

Which lists:

Security bugfixes

- Fixed a Windows local privilege escalation vulnerability caused
  insecure OpenSSL cross-compilation defaults. Successful exploitation
  requires stunnel to be deployed as a Windows service, and
  user-writable C:\ folder. This vulnerability was discovered and
  reported by Rich Mirch.

- OpenSSL DLLs updated to version 1.1.1c.

So those do not affect Buildroot targets, and I have dropped "security"
from the subject and committed, thanks.

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list