stunnel 4.42 released - stunnel-announce

18 Aug 2011


      Dear Users,
I have released version 4.42 of stunnel.  This is a security bugfix  
release.  Upgrade is highly recommended!
The ChangeLog entry:
Version 4.42, 2011.08.18, urgency: HIGH:
* New features
   - New verify level 0 to request and ignore peer certificate.  This
     feature is useful with the new Windows GUI menu to save cached peer
     certificate chains, as SSL client certificates are not sent by  
default.
   - Manual page has been updated.
   - Removed support for changing Windows Service name with "service"  
option.
* Bugfixes
   - Fixed a heap corruption vulnerability in versions 4.40 and 4.41.   
It may
     possibly be leveraged to perform DoS or remote code execution  
attacks.
   - The -quiet commandline option was applied to *all* message boxes.
   - Silent install (/S option) no longer attempts to create  
stunnel.pem.
Home page: http://www.stunnel.org/
Download: ftp://ftp.stunnel.org/stunnel/
SHA-256 hash for stunnel-4.42.tar.gz:
d33c407bfc4f58070e818081bd082c38f91cab7691ccbb794da63143c535de3b
Best regards,
    Mike