[SECURITY] Fedora 20 Update: stunnel-5.01-1.fc20

updates at fedoraproject.org updates at fedoraproject.org
Wed Apr 30 04:07:51 UTC 2014


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-5321
2014-04-18 14:24:35
--------------------------------------------------------------------------------

Name        : stunnel
Product     : Fedora 20
Version     : 5.01
Release     : 1.fc20
URL         : http://www.stunnel.org/
Summary     : An SSL-encrypting socket wrapper
Description :
Stunnel is a socket wrapper which can provide SSL (Secure Sockets
Layer) support to ordinary applications. For example, it can be used
in conjunction with imapd to create an SSL secure IMAP server.

--------------------------------------------------------------------------------
Update Information:

New upstream release
Supports OpenSSL DLLs 1.0.1g.
Fixes to take care of OpenSSL,s TLS heartbeat read overrun (CVE-2014-0160).
--------------------------------------------------------------------------------
ChangeLog:

* Thu Apr 17 2014 Avesh Agarwal <avagarwa at redhat.com> - 5.01-1
- New upstream realease 5.01
- Supports OpenSSL DLLs 1.0.1g.
- Fixes to take care of OpenSSL,s TLS heartbeat
  read overrun (CVE-2014-0160).
* Fri Mar  7 2014 Avesh Agarwal <avagarwa at redhat.com> - 5.00-1
- New upstream realease 5.00
- Updated local patches.
- Fix for CVE-2014-0016
- Fixed changelog date errors
- Fixes rhbz #1006819
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update stunnel' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list