<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Dear Users,<br>
<br>
I have released version 5.55 of stunnel.<br>
This release addresses a number of important Windows issues,
including security vulnerabilities.<br>
<p>Version 5.55, 2019.06.10, urgency: HIGH<br>
* Security bugfixes<br>
- Fixed a Windows local privilege escalation vulnerability<br>
caused insecure OpenSSL cross-compilation defaults.<br>
Successful exploitation requires stunnel to be deployed<br>
as a Windows service, and user-writable C:\ folder. This<br>
vulnerability was discovered and reported by Rich Mirch.<br>
- OpenSSL DLLs updated to version 1.1.1c.<br>
* Bugfixes<br>
- Implemented a workaround for Windows hangs caused by its<br>
inability to the monitor the same socket descriptor from<br>
multiple threads.<br>
- Windows configuration (including cryptographic keys)<br>
is now completely removed at uninstall.<br>
- A number of testing framework fixes and improvements.<br>
</p>
Home page: <a class="moz-txt-link-freetext" href="https://www.stunnel.org/">https://www.stunnel.org/</a><br>
Download: <a class="moz-txt-link-freetext" href="https://www.stunnel.org/downloads.html">https://www.stunnel.org/downloads.html</a><br>
<br>
SHA-256 hashes:<br>
<tt>90de69f41c58342549e74c82503555a6426961b29af3ed92f878192727074c62
stunnel-5.55.tar.gz</tt><tt><br>
</tt><tt>e586b68da9e4faedf41cbcc8378402d7b188bb25b1f0f3cd1f2ce68620ef9e29
stunnel-5.55-win64-installer.exe</tt><tt><br>
</tt><tt>7af80d424986149629aad7d75710400f58ba259042c58557adf743627b5c8e3c
stunnel-5.55-android.zip</tt>
<p>Best regards,<br>
Mike<br>
</p>
</body>
</html>