This is the mail archive of the
cygwin
mailing list for the Cygwin project.
[ANNOUNCEMENT] [security] Updated: stunnel-4.23-1
- From: Andrew Schulman <schulman dot andrew at epamail dot epa dot gov>
- To: cygwin at cygwin dot com
- Date: Thu, 08 May 2008 13:06:02 -0400
- Subject: [ANNOUNCEMENT] [security] Updated: stunnel-4.23-1
- Reply-to: cygwin at cygwin dot com
A new version of stunnel is now available in the Cygwin distribution.
This version includes in important security fix:
* Local privilege escalation bug on Windows NT based
systems fixed. A local user could exploit stunnel
running as a service to gain localsystem privileges.
I strongly recommend that you upgrade your stunnel package immediately.
The full upstream changelog is available at
http://www.stunnel.org/download/ChangeLog.txt, or in
/usr/share/doc/stunnel/ChangeLog.
Andrew E. Schulman
*******************************************************************
To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page. This downloads setup.exe to your
system. Then, run setup and answer all of the questions.
*** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***
If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there. It will be in the format:
cygwin-announce-unsubscribe-you=yourdomain.com@cygwin.com
If you need more information on unsubscribing, start reading here:
http://sources.redhat.com/lists.html#unsubscribe-simple
Please read *all* of the information on unsubscribing that is available
starting at this URL.
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/