Hi,
Is there any chance that there will be a new stunnel version (windows) using openssl 1.1.1 k in order to be protected from at least vulnarability cve-2021-3449. And if so when can that be expected?
Issue 3450 only concerns1.1.1 H-J so that is not a risk at this moment because the most recent Stunnel version is compiled against 1.1.1c.
Hi Erik,
On Wed, Mar 31 at 6:35 AM Erik Soudant wrote:> Issue 3450 only concerns1.1.1 H-J so that is not a risk at this moment because the most recent Stunnel version is compiled against 1.1.1c. Actually, the latest stunnel version 5.58 is compiled against OpenSSL 1.1.1j. So, it is affected by CVE-2021-3450.See https://www.stunnel.org/NEWS.html
Regards, Jose