X-Recipient: archive-cygwin AT delorie DOT com
X-Spam-Check-By: sourceware.org
X-Authority-Analysis: v=1.0 c=1 a=BW6h_4PBmfIA:10 a=7hQusVW2AAAA:8  a=w_pzkKWiAAAA:8 a=20KFwNOVAAAA:8 a=tz21RGdq7AdC-ziTQ64A:9  a=o261PisvdnedmVN0l4cA:7 a=XdzI0lIHGbES43ibQjVWnT9moKoA:4 a=7pGOCF1mIgkA:10  a=66msUWWtX2wA:10 a=oltX7JrCFroA:10
From: Andrew Schulman <schulman DOT andrew AT epamail DOT epa DOT gov>
To: cygwin AT cygwin DOT com
Subject: [ANNOUNCEMENT] [security] Updated: stunnel-4.23-1
Date: Thu, 08 May 2008 13:06:02 -0400
Message-Id: <announce.tmc62499dclrc4cjab6i4mhen3i0i0dnto@4ax.com>
X-Mailer: Forte Agent 4.2/32.1118
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Archive: encrypt
Reply-To: cygwin AT cygwin DOT com
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id m48HS6n0016578

A new version of stunnel is now available in the Cygwin distribution.

This version includes in important security fix:
*  Local privilege escalation bug on Windows NT based
   systems fixed.  A local user could exploit stunnel
   running as a service to gain localsystem privileges.

I strongly recommend that you upgrade your stunnel package immediately.

The full upstream changelog is available at
http://www.stunnel.org/download/ChangeLog.txt, or in
/usr/share/doc/stunnel/ChangeLog. 

Andrew E. Schulman


*******************************************************************


To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain DOT com AT cygwin DOT com  

If you need more information on unsubscribing, start reading here: 

http://sources.redhat.com/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/