SUSE-SU-2022:0872-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2022/suse-su-20220872-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2022:0872-1
Published
2022-03-16T09:35:57Z
Modified
2022-03-16T09:35:57Z
Summary
Security update for stunnel
Details

This update for stunnel fixes the following issues:

Update to 5.62 including new features and bugfixes:

  • Security bugfixes
    • The 'redirect' option was fixed to properly handle unauthenticated requests (bsc#1182529).
    • Fixed a double free with OpenSSL older than 1.1.0.
    • Added hardening to systemd service (bsc#1181400).
  • New features
    • Added new 'protocol = capwin' and 'protocol = capwinctrl' configuration file options.
    • Added support for the new SSL_set_options() values.
    • Added a bash completion script.
    • New 'sessionResume' service-level option to allow or disallow session resumption
    • Download fresh ca-certs.pem for each new release.
    • New 'protocolHeader' service-level option to insert custom 'connect' protocol negotiation headers. This feature can be used to impersonate other software (e.g. web browsers).
    • 'protocolHost' can also be used to control the client SMTP protocol negotiation HELO/EHLO value.
    • Initial FIPS 3.0 support.
    • Client-side 'protocol = ldap' support
  • Bugfixes
    • Fixed a transfer() loop bug.
    • Fixed reloading configuration with 'systemctl reload stunnel.service'.
    • Fixed incorrect messages logged for OpenSSL errors.
    • Fixed 'redirect' with 'protocol'. This combination is not supported by 'smtp', 'pop3' and 'imap' protocols.
    • X.509v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificates.
    • Fixed a tiny memory leak in configuration file reload error handling.
    • Fixed engine initialization.
    • FIPS TLS feature is reported when a provider or container is available, and not when FIPS control API is available.
    • Fix configuration reload when compression is used
    • Fix test suite fixed not to require external connectivity
References

Affected packages

SUSE:Enterprise Storage 7
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Enterprise%20Storage%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Linux Enterprise Module for Server Applications 15 SP3
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Linux Enterprise Real Time 15 SP2
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Linux Enterprise Server 15 SP2-BCL
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Linux Enterprise Server 15 SP2-LTSS
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Manager Proxy 4.1
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Manager%20Proxy%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Manager Retail Branch Server 4.1
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"
SUSE:Manager Server 4.1
stunnel

Package

Name
stunnel
Purl
pkg:rpm/suse/stunnel&distro=SUSE%20Manager%20Server%204.1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.62-3.14.1

Ecosystem specific 

{
    "binaries":  [
        {
            "stunnel":  "5.62-3.14.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2022:0872-1.json"