X-Recipient:	archive-cygwin AT delorie DOT com
X-Spam-Check-By:	sourceware.org
X-Authority-Analysis:	v=1.0 c=1 a=BW6h_4PBmfIA:10 a=7hQusVW2AAAA:8 a=w_pzkKWiAAAA:8 a=20KFwNOVAAAA:8 a=tz21RGdq7AdC-ziTQ64A:9 a=o261PisvdnedmVN0l4cA:7 a=XdzI0lIHGbES43ibQjVWnT9moKoA:4 a=7pGOCF1mIgkA:10 a=66msUWWtX2wA:10 a=oltX7JrCFroA:10
From:	Andrew Schulman <schulman DOT andrew AT epamail DOT epa DOT gov>
To:	cygwin AT cygwin DOT com
Subject:	[ANNOUNCEMENT] [security] Updated: stunnel-4.23-1
Date:	Thu, 08 May 2008 13:06:02 -0400
Message-Id:	<announce.tmc62499dclrc4cjab6i4mhen3i0i0dnto@4ax.com>
X-Mailer:	Forte Agent 4.2/32.1118
MIME-Version:	1.0
X-Archive:	encrypt
Reply-To:	cygwin AT cygwin DOT com
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id m48HS6n0016578

A new version of stunnel is now available in the Cygwin distribution.

This version includes in important security fix:
*  Local privilege escalation bug on Windows NT based
   systems fixed.  A local user could exploit stunnel
   running as a service to gain localsystem privileges.

I strongly recommend that you upgrade your stunnel package immediately.

The full upstream changelog is available at
http://www.stunnel.org/download/ChangeLog.txt, or in
/usr/share/doc/stunnel/ChangeLog. 

Andrew E. Schulman


*******************************************************************


To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain DOT com AT cygwin DOT com  

If you need more information on unsubscribing, start reading here: 

http://sources.redhat.com/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -