Bug 26175

Summary:	Stunnel 3.24 signaling bug
Product:	Gentoo Linux	Reporter:	fbusse
Component:	New packages	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	critical
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description fbusse 2003-08-07 23:06:05 UTC

Stunnel 3.24 and earlier (as well as 4.0x x<4) does not properly handle SIGCHLD 
signals safely. Stunnel 3.25 is now available and fixes this problem.  
This bug can lead to a DoS attack. 
Since 4.04 in portage is masked and 3.24 the newest stable, this problem still exists.

Comment 1 James Harlow (RETIRED) gentoo-dev

2003-09-06 04:08:36 UTC

Not much point in me creating an attachment - the 3.24 ebuild works fine for me when 
renamed to 3.26.

Comment 2 SpanKY gentoo-dev

2003-09-11 19:54:00 UTC

*** Bug 26717 has been marked as a duplicate of this bug. ***

Comment 3 SpanKY gentoo-dev

2003-09-11 19:59:49 UTC

3.26 is now in portage and stable ...

Comment 4 solar (RETIRED) gentoo-dev

2003-09-21 23:43:52 UTC

thanks SpanKY
I'm changing resolution to FIXED

Comment 5 solar (RETIRED) gentoo-dev

2003-09-22 00:20:29 UTC

No really I'm changing the resolution this time.