DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:subject:date:message-id
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=F92HCJsgRnrfBEL6v+urOwIXwMEJnOiHD7tvWsb8YLuR05+Kc5OxF
	POMgIF3kc8IKx8yothW/sZKvKMfDi39882ZR08fdRDBvVYQkpVwkfWNgjIV+30Zp
	IoqjTIKooa9FBGmyc+b696JCJAUAFi2cZzTZjNtoWJsuNueq29uMgs=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Reply-To: cygwin AT cygwin DOT com
From: Andrew Schulman <schulman DOT andrew AT epamail DOT epa DOT gov>
To: cygwin AT cygwin DOT com
Subject: [ANNOUNCEMENT] [SECURITY] Updated: stunnel-4.56-1
Date: Sun, 30 Jun 2013 09:41:18 -0400
Message-Id: <announce.u6d0t8ld3heousb6jlqbuh3chehvlotumk@4ax.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit

A new version of stunnel, 4.56-1, is available in the Cygwin distribution. This is a new upstream release, with assorted
minor updates and bug fixes, and one security fix:

* Buffer overflow vulnerability fixed in the NTLM authentication of the CONNECT protocol negotiation. See
https://www.stunnel.org/CVE-2013-1762.html for details.

You can read the upstream changelog at http://www.stunnel.org/news/.

stunnel is a program that allows you to encrypt arbitrary TCP connections
inside SSL (Secure Sockets Layer). stunnel can allow you to secure non-SSL
aware daemons and protocols (like POP, IMAP, LDAP, etc) by having stunnel
provide the encryption, requiring no changes to the daemon's code.

Andrew E. Schulman


*******************************************************************


To update your installation, click on the "Install Cygwin now" link on
the http://cygwin.com/ web page.  This downloads setup.exe to your
system.  Then, run setup and answer all of the questions.

              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain.com_at_cygwin.com

If you need more information on unsubscribing, start reading here: 

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is available
starting at this URL.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple