﻿id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
12139	stunnel-5.55	Douglas R. Reno	Bruce Dubbs	"New minor version

{{{
Version 5.55, 2019.06.10, urgency: HIGH

    Security bugfixes
       -  Fixed a Windows local privilege escalation vulnerability caused 
          insecure OpenSSL cross-compilation defaults. Successful exploitation
          requires stunnel to be deployed as a Windows service, and user-
          writable C:\ folder.  
       -  OpenSSL DLLs updated to version 1.1.1c.

    Bugfixes
       -  Implemented a workaround for Windows hangs caused by its inability
          to monitor the same socket descriptor from multiple threads.
       -  Windows configuration (including cryptographic keys) is now 
          completely removed at uninstall.
       -  A number of testing framework fixes and improvements.
}}}
"	enhancement	closed	normal	9.0	BOOK	SVN	medium	fixed		
