SUSE-SU-2021:0194-1
Security update for stunnel
SUSE-SU-2021:0194-1 is a vulnerability with no CVSS score yet in stunnel, published January 22, 2021. No source lists public exploit code. Fixed in stunnel 5.57-3.5.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5.57-3.5.1stunnel
Description
This update for stunnel fixes the following issues:
Security issue fixed:
- The 'redirect' option was fixed to properly handle 'verifyChain = yes' (bsc#1177580).
Non-security issues fixed:
Fix startup problem of the stunnel daemon (bsc#1178533)
update to 5.57:
- Security bugfixes
- New features
- New securityLevel configuration file option.
- Support for modern PostgreSQL clients
- TLS 1.3 configuration updated for better compatibility.
- Bugfixes
- Fixed a transfer() loop bug.
- Fixed memory leaks on configuration reloading errors.
- DH/ECDH initialization restored for client sections.
- Delay startup with systemd until network is online.
- A number of testing framework fixes and improvements.
update to 5.56:
- Various text files converted to Markdown format.
- Support for realpath(3) implementations incompatible with POSIX.1-2008, such as 4.4BSD or Solaris.
- Support for engines without PRNG seeding methods (thx to Petr Mikhalitsyn).
- Retry unsuccessful port binding on configuration file reload.
- Thread safety fixes in SSL_SESSION object handling.
- Terminate clients on exit in the FORK threading model.
Fixup stunnel.conf handling:
- Remove old static openSUSE provided stunnel.conf.
- Use upstream stunnel.conf and tailor it for openSUSE using sed.
- Don't show README.openSUSE when installing.
enable /etc/stunnel/conf.d
re-enable openssl.cnf
Affected packages
| Package | Affected | Fixed |
|---|---|---|
stunnelSUSE:Linux Enterprise Module for Server Applications 15 SP2 | before 5.57-3.5.1 | 5.57-3.5.1 |
What each source reports
OSVNo score
Security update for stunnel
This update for stunnel fixes the following issues:
Security issue fixed:
- The 'redirect' option was fixed to properly handle 'verifyChain = yes' (bsc#1177580).
Non-security issues fixed:
Fix startup problem of the stunnel daemon (bsc#1178533)
update to 5.57:
- Security bugfixes
- New features
- New securityLevel configuration file option.
- Support for modern PostgreSQL clients
- TLS 1.3 configuration updated for better compatibility.
- Bugfixes
- Fixed a transfer() loop bug.
- Fixed memory leaks on configuration reloading errors.
- DH/ECDH initialization restored for client sections.
- Delay startup with systemd until network is online.
- A number of testing framework fixes and improvements.
update to 5.56:
- Various text files converted to Markdown format.
- Support for realpath(3) implementations incompatible with POSIX.1-2008, such as 4.4BSD or Solaris.
- Support for engines without PRNG seeding methods (thx to Petr Mikhalitsyn).
- Retry unsuccessful port binding on configuration file reload.
- Thread safety fixes in SSL_SESSION object handling.
- Terminate clients on exit in the FORK threading model.
Fixup stunnel.conf handling:
- Remove old static openSUSE provided stunnel.conf.
- Use upstream stunnel.conf and tailor it for openSUSE using sed.
- Don't show README.openSUSE when installing.
enable /etc/stunnel/conf.d
re-enable openssl.cnf
- Record
SUSE-SU-2021:0194-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.