mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 07:51:59 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/stunnel: security bump to 5.80

Browse Source 
Fixes following CVE's:

CVE-2026-70368: Fixed an out-of-bounds memory
access triggered by logging attacker-controlled protocol messages longer
than 1,024 bytes (thanks to AISLE Research and Clemens Lang).

CVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost
destination filter using alternate local-address encodings and
interface-scoped IPv6 destinations (thanks to AISLE Research and Clemens
Lang).

Complete Changelog is here:
https://www.stunnel.org/NEWS.html

Signed-off-by: Waldemar Brodkorb <wbx@openadk.org>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Waldemar Brodkorb
2026-08-09 15:04:36 +02:00
committed by Julien Olivain
parent baa86d079d
commit 8b6eea299b
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/stunnel/stunnel.hash
View File

@@ -1,5 +1,5 @@
# From https://www.stunnel.org/archive/5.x/stunnel-5.78.tar.gz.sha256
sha256 8727e53bb8b7528f850327a2a149158422c02183bc120d1d733cc65b1e2c349d stunnel-5.78.tar.gz
# From https://www.stunnel.org/archive/5.x/stunnel-5.80.tar.gz.sha256
sha256 6d0841d48de07cbbaf4a055919065bf7bb5ebc63cc15c97a2c76caa2bf285513 stunnel-5.80.tar.gz
# Locally calculated
sha256 716f18b10eac3f1875ea2205418dd1b0084bd210bd17d615df6b180cfc4d65b6 COPYING.md
sha256 62f171d4d8b6726df61f18a6bbc0a70f79c4bc2134d837d35c81fc6289a2d84d COPYRIGHT.md

2
package/stunnel/stunnel.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
STUNNEL_VERSION = 5.78
STUNNEL_VERSION = 5.80
STUNNEL_SITE = https://www.stunnel.org/archive/5.x
STUNNEL_DEPENDENCIES = host-pkgconf openssl
STUNNEL_CONF_OPTS = --with-ssl=$(STAGING_DIR)/usr --with-threads=fork \