[Buildroot] [PATCH 1/2] package/stunnel: security bump to version 5.55
Peter Korsgaard
peter at korsgaard.com
Sun Jul 14 10:11:56 UTC 2019
>>>>> "Pierre-Jean" == Pierre-Jean Texier <pjtexier at koncepto.io> writes:
> See https://www.stunnel.org/ChangeLog.md.html
Which lists:
Security bugfixes
- Fixed a Windows local privilege escalation vulnerability caused
insecure OpenSSL cross-compilation defaults. Successful exploitation
requires stunnel to be deployed as a Windows service, and
user-writable C:\ folder. This vulnerability was discovered and
reported by Rich Mirch.
- OpenSSL DLLs updated to version 1.1.1c.
So those do not affect Buildroot targets, and I have dropped "security"
from the subject and committed, thanks.
--
Bye, Peter Korsgaard
More information about the buildroot
mailing list