Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package stunnel for openSUSE:Factory checked in at 2026-08-11 17:13:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/stunnel (Old) and /work/SRC/openSUSE:Factory/.stunnel.new.17972 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "stunnel" Tue Aug 11 17:13:33 2026 rev:52 rq:1370500 version:5.80 Changes: -------- --- /work/SRC/openSUSE:Factory/stunnel/stunnel.changes 2026-07-09 22:21:48.771101666 +0200 +++ /work/SRC/openSUSE:Factory/.stunnel.new.17972/stunnel.changes 2026-08-11 17:14:46.844058399 +0200 @@ -1,0 +2,22 @@ +Mon Aug 10 08:44:40 UTC 2026 - Pedro Monreal <[email protected]> + +- Update to 5.80: + * Security bugfixes + - CVE-2026-70368: Fixed an out-of-bounds memory access triggered + by logging attacker-controlled protocol messages longer than 1,024 + bytes (thanks to AISLE Research and Clemens Lang) (bsc#1274206). + - CVE-2026-70367: Fixed a SOCKS server mode bypass of the localhost + destination filter using alternate local-address encodings and + interface-scoped IPv6 destinations (thanks to AISLE Research and + Clemens Lang) (bsc#1274207). + - Restricted Windows GUI/service control pipes to local clients. + * Bugfixes + - Fixed concurrent DTLS handshakes from clients sharing an IP address. + - Fixed version reporting in builds from source. + - Rejected stream-oriented protocol negotiation with the UDP transport + during configuration validation. + * Features + - Added the "CRLcheckChain" service-level option for opt-in + full-chain CRL verification. + +------------------------------------------------------------------- Old: ---- stunnel-5.79.tar.gz stunnel-5.79.tar.gz.asc New: ---- stunnel-5.80.tar.gz stunnel-5.80.tar.gz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ stunnel.spec ++++++ --- /var/tmp/diff_new_pack.JS6H0i/_old 2026-08-11 17:14:47.608090775 +0200 +++ /var/tmp/diff_new_pack.JS6H0i/_new 2026-08-11 17:14:47.612090944 +0200 @@ -22,7 +22,7 @@ %define _fillupdir %{_localstatedir}/adm/fillup-templates %endif Name: stunnel -Version: 5.79 +Version: 5.80 Release: 0 Summary: Universal TLS Tunnel License: GPL-2.0-or-later ++++++ stunnel-5.79.tar.gz -> stunnel-5.80.tar.gz ++++++ ++++ 3036 lines of diff (skipped)
