26175 – Stunnel 3.24 signaling bug

Bug 26175 - Stunnel 3.24 signaling bug

Summary: Stunnel 3.24 signaling bug

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	New packages (show other bugs)
Hardware:	All Linux

Importance:	High critical (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:
Keywords:

Duplicates (1):	26717 (view as bug list)
Depends on:
Blocks:

Reported:	2003-08-07 23:06 UTC by fbusse
Modified:	2003-09-22 00:20 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description fbusse 2003-08-07 23:06:05 UTC

Stunnel 3.24 and earlier (as well as 4.0x x<4) does not properly handle SIGCHLD 
signals safely. Stunnel 3.25 is now available and fixes this problem.  
This bug can lead to a DoS attack. 
Since 4.04 in portage is masked and 3.24 the newest stable, this problem still exists.

Comment 1 James Harlow (RETIRED) gentoo-dev

2003-09-06 04:08:36 UTC

Not much point in me creating an attachment - the 3.24 ebuild works fine for me when 
renamed to 3.26.

Comment 2 SpanKY gentoo-dev

2003-09-11 19:54:00 UTC

*** Bug 26717 has been marked as a duplicate of this bug. ***

Comment 3 SpanKY gentoo-dev

2003-09-11 19:59:49 UTC

3.26 is now in portage and stable ...

Comment 4 solar (RETIRED) gentoo-dev

2003-09-21 23:43:52 UTC

thanks SpanKY
I'm changing resolution to FIXED

Comment 5 solar (RETIRED) gentoo-dev

2003-09-22 00:20:29 UTC

No really I'm changing the resolution this time.