SIGCHLD problem in Stunnel

From: Jonas Eriksson (jeat_private)
Date: Sun Jan 12 2003 - 09:30:38 PST

  • Next message: VOID.AT Security: "[VSA0306] YABBSE 1.4.1 SQL Injection Bugs"

    Some SIGCHLD handler problem in Stunnel.. from the announce-list
    
    
    ---------- Forwarded message ----------
    Date: Sun, 12 Jan 2003 16:57:02 +0100
    From: Michal Trojnara <Michal.Trojnaraat_private>
    To: openssl-usersat_private, stunnel-announceat_private,
         stunnel-usersat_private
    Subject: Stunnel 4.04 released
    
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    Version 4.04, 2003.01.12, urgency: MEDIUM:
    * New feature sponsored by SURFnet http://www.surfnet.nl/
      - Encrypted private key can be used with Win32 GUI.
    * New features
      - New 'options' configuration option to setup
        OpenSSL library hacks with SSL_CTX_set_options().
      - 'service' option also changes the name for
        TCP Wrappers access control in inetd mode.
      - Support for BeOS (thx to Mike I. Kozin <mikat_private>)
      - SSL is negotiated before connecting remote host
        or spawning local process whenever possible.
      - REMOTE_HOST variable is always placed in the
        enrivonment of a process spawned with 'exec'.
      - Whole SSL error stack is dumped on errors.
      - 'make cert' rule is back (was missing since 4.00).
      - Manual page updated (special thanks to Brian Hatch).
      - TODO updated.
    * Bugfixes
      - Major code cleanup (thx to Steve Grubb <linux_4everat_private>).
      - Unsafe functions are removed from SIGCHLD handler.
      - Several bugs in auth_user() fixed.
      - Incorrect port when using 'local' option fixed.
      - OpenSSL tools '-rand' option is no longer directly
        used with a device (like '/dev/urandom').
        Temporary random file is created with 'dd' instead.
    * DLLs for OpenSSL 0.9.7.
    
    The problem with unsafe SIGCHLD handler is a serious one,
    so I recommend the upgrade.
    
    Homepage: http://stunnel.mirt.net/
    Download: ftp://stunnel.mirt.net/stunnel/
    
    Best regards,
        Mike
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.1 (GNU/Linux)
    
    iD8DBQE+IZBO/NU+nXTHMtERAki4AJ9orDnEQ/QAGLJLwUA/384LQINP0ACdHwZH
    gAcF2V4G00rBWtwLf+uMolg=
    =1mlP
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Mon Jan 20 2003 - 15:53:45 PST