[security] Updated: stunnel-4.23-1

Andrew Schulman schulman.andrew@epamail.epa.gov
Thu May 8 17:27:00 GMT 2008


A new version of stunnel is now available in the Cygwin distribution.

This version includes in important security fix:
*  Local privilege escalation bug on Windows NT based
   systems fixed.  A local user could exploit stunnel
   running as a service to gain localsystem privileges.

I strongly recommend that you upgrade your stunnel package immediately.

The full upstream changelog is available at
http://www.stunnel.org/download/ChangeLog.txt, or in
/usr/share/doc/stunnel/ChangeLog. 

Andrew E. Schulman


*******************************************************************


To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain.com@cygwin.com  

If you need more information on unsubscribing, start reading here: 

http://sources.redhat.com/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.



More information about the Cygwin-announce mailing list