X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:subject:date:message-id
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=F92HCJsgRnrfBEL6v+urOwIXwMEJnOiHD7tvWsb8YLuR05+Kc5OxF
	POMgIF3kc8IKx8yothW/sZKvKMfDi39882ZR08fdRDBvVYQkpVwkfWNgjIV+30Zp
	IoqjTIKooa9FBGmyc+b696JCJAUAFi2cZzTZjNtoWJsuNueq29uMgs=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:subject:date:message-id
	:mime-version:content-type:content-transfer-encoding; s=default;
	bh=70eVpH906+xmI63XQMfmKy5bk20=; b=etxxNYNF2wHfmINBVRzdgzHtuuTI
	GI916wMQ0MHypq2gVRcHiCTYGXnmEntvHX9NdPlN5b8sGfzz7UZgDN6V2719nesm
	Cip0hNlk0/f9boASnhXT3vo8SxnVy84/MXaO8iXSn7CXPfQBXwMEO89JTGHbTuQc
	uYgzBOb6DyaFqjA=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
X-Spam-SWARE-Status:	No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.3.1
Reply-To:	cygwin AT cygwin DOT com
From:	Andrew Schulman <schulman DOT andrew AT epamail DOT epa DOT gov>
To:	cygwin AT cygwin DOT com
Subject:	[ANNOUNCEMENT] [SECURITY] Updated: stunnel-4.56-1
Date:	Sun, 30 Jun 2013 09:41:18 -0400
Message-Id:	<announce.u6d0t8ld3heousb6jlqbuh3chehvlotumk@4ax.com>
MIME-Version:	1.0
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id r5UFd4Xg025341

A new version of stunnel, 4.56-1, is available in the Cygwin distribution. This is a new upstream release, with assorted
minor updates and bug fixes, and one security fix:

* Buffer overflow vulnerability fixed in the NTLM authentication of the CONNECT protocol negotiation. See
https://www.stunnel.org/CVE-2013-1762.html for details.

You can read the upstream changelog at http://www.stunnel.org/news/.

stunnel is a program that allows you to encrypt arbitrary TCP connections
inside SSL (Secure Sockets Layer). stunnel can allow you to secure non-SSL
aware daemons and protocols (like POP, IMAP, LDAP, etc) by having stunnel
provide the encryption, requiring no changes to the daemon's code.

Andrew E. Schulman


*******************************************************************


To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain.com_at_cygwin.com

If you need more information on unsubscribing, start reading here: 

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -