Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 24 articles for you...
99
security advisorysecurity issuecriticalSlackware 15.0: Critical stunnel Fix Released in SSA:2025-291-01
New stunnel packages are available for Slackware 15.0 and -current to fix a security issue. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] stunnel (SSA:2025-291-01) New stunnel packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/stunnel-5.76-i586-1_slack15.0.txz: Upgraded. Service-level multivalued options now override (rather than append to) global defaults, preventing unintended configurations. (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/stunnel-5.76-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/stunnel-5.76-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/stunnel-5.76-i686-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/stunnel-5.76-x86_64-1.txz MD5 signatures: +-------------+ Slackware 15.0 package: b531268d2e8ffc7a90bda6759f0a6d55 stunnel-5.76-i586-1_slack15.0.txz Slackware x86_64 15.0 package: d23575680b65e8a769cd01b18b4733f9 stunnel-5.76-x86_64-1_slack15.0.txz Slackware -current package: a1a02049b625252d5b7c0751df149975 n/stunnel-5.76-i686-1.txz Slackware x86_64 -current package: 34715fa30d49a8d9f5a7fba5da827af9 n/stunnel-5.76-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkgstunnel-5.76-i586-1_slack15.0.txz +-----+ . New stunnel packages for Slackware address a critical security issue; updates recommended to ensure configuration integrity.. Slackware security, Stunnel update, Critical security fix. . Severity: Critical. LinuxSecurity.com Team
Oct 18, 2025
•Critical
Slackware
172
security advisoryaccess controlremote attackUbuntu 20.04/18.04 LTS USN-6901-1: Stunnel Access Security Issue
stunnel could allow unintended access to network services.. ========================================================================== Ubuntu Security Notice USN-6901-1 July 18, 2024 stunnel vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary: stunnel could allow unintended access to network services. Software Description: - stunnel4: Universal SSL tunnel for network daemons Details: It was discovered that stunnel did not properly validate client certificates when configured to use both the redirect and verifyChain options. A remote attacker could potentially use this issue to obtain sensitive information by accessing the tunneled service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS stunnel4 3:5.56-1ubuntu0.2 Ubuntu 18.04 LTS stunnel4 3:5.44-1ubuntu3+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6901-1 CVE-2021-20230 Package Information: https://launchpad.net/ubuntu/+source/stunnel4/3:5.56-1ubuntu0.2 . Ubuntu Security Notice USN-6902-1 highlights a flaw in OpenSSH that could permit unauthorized remote access.. Stunnel Security, Ubuntu Advisory, Network Security Issue, Remote Access Vulnerability. . Severity: Important. LinuxSecurity.com Team
Jul 18, 2024
•Important
Ubuntu
203
security advisorysecurity updatestunnelMageia 8: MGASA-2022-0109 Moderate: Stunnel Security Fix
Update to 5.62 including new features and bugfixes: Security bugfixes - The "redirect" option was fixed to properly handle unauthenticated requests (bsc#1182529). - Fixed a double free with OpenSSL older than 1.1.0. . MGASA-2022-0109 - Updated stunnel packages fix security vulnerability Publication date: 21 Mar 2022 URL: https://advisories.mageia.org/MGASA-2022-0109.html Type: security Affected Mageia releases: 8 Update to 5.62 including new features and bugfixes: Security bugfixes - The "redirect" option was fixed to properly handle unauthenticated requests (bsc#1182529). - Fixed a double free with OpenSSL older than 1.1.0. - Added hardening to systemd service (bsc#1181400). New features - Added new "protocol = capwin" and "protocol = capwinctrl" configuration file options. - Added support for the new SSL_set_options() values. - Added a bash completion script. - New 'sessionResume' service-level option to allow or disallow session resumption - Download fresh ca-certs.pem for each new release. - New 'protocolHeader' service-level option to insert custom 'connect' protocol negotiation headers. This feature can be used to impersonate other software (e.g. web browsers). - 'protocolHost' can also be used to control the client SMTP protocol negotiation HELO/EHLO value. - Initial FIPS 3.0 support. - Client-side "protocol = ldap" support Bugfixes - Fixed a transfer() loop bug. - Fixed reloading configuration with "systemctl reload stunnel.service". - Fixed incorrect messages logged for OpenSSL errors. - Fixed 'redirect' with 'protocol'. This combination is not supported by 'smtp', 'pop3' and 'imap' protocols. - X.509v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificates. - Fixed a tiny memory leak in configuration file reload error handling. - Fixed engine initialization. - FIPS TLS feature is reported when a provider or container is available, and not when FIPS control API is available. - Fix configuration reload when compression is used -Fix test suite fixed not to require external connectivity References: - https://bugs.mageia.org/show_bug.cgi?id=30185 - https://lists.suse.com/pipermail/sle-security-updates/2022-March/010458.html - SRPMS: - 8/core/stunnel-5.63-1.mga8 . Debian 2022-0205 updates curl to address vulnerabilities and improve performance with added options and support for new standards.. Mageia Security, Stunnel Update, Bugfixes, Security Fix. . LinuxSecurity.com Team
Mar 21, 2022
Mageia
202
security advisoryDoSstunnelopenSUSE Leap 15.3 & 15.4: Security Fix for Stunnel 2022:0872-1 Important
An update that contains security fixes and contains one feature can now be installed. . openSUSE Security Update: Security update for stunnel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2022:0872-1 Rating: important References: #1181400 #1182529 SLE-20679 Affected Products: openSUSE Leap 15.3 openSUSE Leap 15.4 ______________________________________________________________________________ An update that contains security fixes and contains one feature can now be installed. Description: This update for stunnel fixes the following issues: Update to 5.62 including new features and bugfixes: * Security bugfixes - The "redirect" option was fixed to properly handle unauthenticated requests (bsc#1182529). - Fixed a double free with OpenSSL older than 1.1.0. - Added hardening to systemd service (bsc#1181400). * New features - Added new "protocol = capwin" and "protocol = capwinctrl" configuration file options. - Added support for the new SSL_set_options() values. - Added a bash completion script. - New 'sessionResume' service-level option to allow or disallow session resumption - Download fresh ca-certs.pem for each new release. - New 'protocolHeader' service-level option to insert custom 'connect' protocol negotiation headers. This feature can be used to impersonate other software (e.g. web browsers). - 'protocolHost' can also be used to control the client SMTP protocol negotiation HELO/EHLO value. - Initial FIPS 3.0 support. - Client-side "protocol = ldap" support * Bugfixes - Fixed a transfer() loop bug. - Fixed reloading configuration with "systemctl reload stunnel.service". - Fixed incorrect messages logged for OpenSSL errors. - Fixed 'redirect' with 'protocol'. This combinationis not supported by 'smtp', 'pop3' and 'imap' protocols. - X.509v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificates. - Fixed a tiny memory leak in configuration file reload error handling. - Fixed engine initialization. - FIPS TLS feature is reported when a provider or container is available, and not when FIPS control API is available. - Fix configuration reload when compression is used - Fix test suite fixed not to require external connectivity Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.4: zypper in -t patch openSUSE-SLE-15.4-2022-872=1 - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2022-872=1 Package List: - openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - openSUSE Leap 15.4 (noarch): stunnel-doc-5.62-3.14.1 - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - openSUSE Leap 15.3 (noarch): stunnel-doc-5.62-3.14.1 References: https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1182529 . A crucial stability patch for stunnel on Fedora introduces improvements, enhancements, and setup instructions. Keep your system safe!. openSUSE stunnel security important fix. . Severity: Important. LinuxSecurity.com Team
Mar 16, 2022
•Important
OpenSUSE
100
security advisorystunnelSUSESUSE: 2022:0872-1 Critical: Security Update for Stunnel Software
An update that contains security fixes and contains one feature can now be installed. . SUSE Security Update: Security update for stunnel ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:0872-1 Rating: important References: #1181400 #1182529 SLE-20679 Affected Products: SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-SP3 SUSE Linux Enterprise High Performance Computing 15-SP4 SUSE Linux Enterprise Module for Server Applications 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP4 SUSE Linux Enterprise Realtime Extension 15-SP2 SUSE Linux Enterprise Server 15-SP2-BCL SUSE Linux Enterprise Server 15-SP2-LTSS SUSE Linux Enterprise Server 15-SP3 SUSE Linux Enterprise Server 15-SP4 SUSE Linux Enterprise Server for SAP 15-SP2 SUSE Linux Enterprise Server for SAP Applications 15-SP3 SUSE Linux Enterprise Server for SAP Applications 15-SP4 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 SUSE Manager Server 4.2 ______________________________________________________________________________ An update that contains security fixes and contains one feature can now be installed. Description: This update for stunnel fixes the following issues: Update to 5.62 including new features and bugfixes: * Security bugfixes - The "redirect" option was fixed to properly handle unauthenticated requests (bsc#1182529). - Fixed a double free with OpenSSL older than 1.1.0. - Added hardening to systemd service (bsc#1181400). * New features - Added new "protocol = capwin" and "protocol = capwinctrl" configuration file options. - Added support for the new SSL_set_options() values. - Added a bash completion script. - New 'sessionResume' service-level option to allow or disallow session resumption - Download fresh ca-certs.pem for each new release. - New 'protocolHeader' service-level option to insert custom 'connect' protocol negotiation headers. This feature can be used to impersonate other software (e.g. web browsers). - 'protocolHost' can also be used to control the client SMTP protocol negotiation HELO/EHLO value. - Initial FIPS 3.0 support. - Client-side "protocol = ldap" support * Bugfixes - Fixed a transfer() loop bug. - Fixed reloading configuration with "systemctl reload stunnel.service". - Fixed incorrect messages logged for OpenSSL errors. - Fixed 'redirect' with 'protocol'. This combination is not supported by 'smtp', 'pop3' and 'imap' protocols. - X.509v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificates. - Fixed a tiny memory leak in configuration file reload error handling. - Fixed engine initialization. - FIPS TLS feature is reported when a provider or container is available, and not when FIPS control API is available. - Fix configuration reload when compression is used - Fix test suite fixed not to require external connectivity Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server 4.1: zypper in -t patchSUSE-SLE-Product-SUSE-Manager-Server-4.1-2022-872=1 - SUSE Manager Retail Branch Server 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.1-2022-872=1 - SUSE Manager Proxy 4.1: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.1-2022-872=1 - SUSE Linux Enterprise Server for SAP 15-SP2: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2022-872=1 - SUSE Linux Enterprise Server 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2022-872=1 - SUSE Linux Enterprise Server 15-SP2-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-BCL-2022-872=1 - SUSE Linux Enterprise Realtime Extension 15-SP2: zypper in -t patch SUSE-SLE-Product-RT-15-SP2-2022-872=1 - SUSE Linux Enterprise Module for Server Applications 15-SP4: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP4-2022-872=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-872=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2022-872=1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-ESPOS-2022-872=1 - SUSE Enterprise Storage 7: zypper in -t patch SUSE-Storage-7-2022-872=1 Package List: - SUSE Manager Server 4.1 (ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Manager Retail Branch Server 4.1 (x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Manager Proxy 4.1 (x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Linux Enterprise Server for SAP 15-SP2 (ppc64le x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Linux Enterprise Server 15-SP2-LTSS (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Linux Enterprise Server 15-SP2-BCL (x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Linux Enterprise Realtime Extension 15-SP2 (x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP4 (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Linux Enterprise Module for Server Applications 15-SP3 (aarch64 ppc64le s390x x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (aarch64 x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (aarch64 x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 - SUSE Enterprise Storage 7 (aarch64 x86_64): stunnel-5.62-3.14.1 stunnel-debuginfo-5.62-3.14.1 stunnel-debugsource-5.62-3.14.1 References: https://bugzilla.suse.com/1181400 https://bugzilla.suse.com/1182529 . The latest update for stunnel addresses significant vulnerabilities and integrates essential patches. Protect your installations immediately!. SUSE Stunnel Update, Security Fixes, Systemd Hardening. . Severity: Important. LinuxSecurity.com Team
Mar 16, 2022
•Important
SuSE
203
security advisorysecurity issuecriticalMageia 7: MGASA-2021-0284 Critical: Stunnel Client Certificate Issue
Updated stunnel package fixes security vulnerability: Client certificate not correctly verified when redirect and verifyChain options are used (CVE-2021-20230). . MGASA-2021-0284 - Updated tunnel packages fix security vulnerability Publication date: 23 Jun 2021 URL: https://advisories.mageia.org/MGASA-2021-0284.html Type: security Affected Mageia releases: 7 CVE: CVE-2021-20230 Updated stunnel package fixes security vulnerability: Client certificate not correctly verified when redirect and verifyChain options are used (CVE-2021-20230). References: - https://bugs.mageia.org/show_bug.cgi?id=28195 - https://access.redhat.com/errata/RHSA-2021:0618 - https://www.cve.org/CVERecord?id=CVE-2021-20230 SRPMS: - 7/core/stunnel-5.57-1.mga7 . Recent upgrades to the tunnel module address problems with client cert validation; essential for Mageia users.. stunnel Update, Mageia Security, Client Certificate Fixes, Tunnel Security Alerts. . Severity: Critical. LinuxSecurity.com Team
Jun 23, 2021
•Critical
Mageia
91
security advisorylow severitystunnelGentoo: GLSA-202105-02 Low: Stunnel Certificate Integrity Issue
Stunnel was not properly verifying TLS certificates, possibly allowing an integrity/confidentiality compromise.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202105-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: stunnel: Improper certificate validation Date: May 26, 2021 Bugs: #772146 ID: 202105-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Stunnel was not properly verifying TLS certificates, possibly allowing an integrity/confidentiality compromise. Background ========= The stunnel program is designed to work as an SSL/TLS encryption wrapper between a client and a local or remote server. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/stunnel < 5.58 > = 5.58 Description ========== It was discovered that stunnel did not correctly verified the client certificate when options "redirect" and "verifyChain" are used. Impact ===== A remote attacker could send a specially crafted certificate, possibly resulting in a breach of integrity or confidentiality. Workaround ========= There is no known workaround at this time. Resolution ========= All stunnel users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/stunnel-5.58" References ========= [ 1 ] CVE-2021-20230 https://nvd.nist.gov/vuln/detail/CVE-2021-20230 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202105-02 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
May 26, 2021
•Low
Gentoo
100
security advisorynetwork securityupdateSUSE: 2021:1465-1 Important: Stunnel Security Fix for DoS
An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for stunnel ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1465-1 Rating: important References: #1177580 #1182529 Cross-References: CVE-2021-20230 CVSS scores: CVE-2021-20230 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2021-20230 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: SUSE Manager Server 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Server for SAP 15-SP1 SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server 15-SP1-LTSS SUSE Linux Enterprise Server 15-SP1-BCL SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Enterprise Storage 6 SUSE CaaS Platform 4.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for stunnel fixes the following issues: - Security fix: [bsc#1177580, bsc#1182529, CVE-2021-20230] * "redirect" option does not properly handle "verifyChain = yes" Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Manager Server4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-1465=1 - SUSE Manager Retail Branch Server 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-1465=1 - SUSE Manager Proxy 4.0: zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-1465=1 - SUSE Linux Enterprise Server for SAP 15-SP1: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2021-1465=1 - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2021-1465=1 - SUSE Linux Enterprise Server 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-1465=1 - SUSE Linux Enterprise Server 15-SP1-BCL: zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-BCL-2021-1465=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2021-1465=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-1465=1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-1465=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2021-1465=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2021-1465=1 - SUSE Enterprise Storage 6: zypper in -t patch SUSE-Storage-6-2021-1465=1 - SUSE CaaS Platform 4.0: To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. Package List: - SUSE Manager Server 4.0 (ppc64le s390x x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Manager Retail Branch Server 4.0 (x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Manager Proxy 4.0 (x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise Server for SAP 15-SP1 (ppc64le x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise Server 15-SP1-LTSS (aarch64 ppc64le s390x x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise Server 15-SP1-BCL (x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (aarch64 x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (aarch64 x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE Enterprise Storage 6 (aarch64 x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 - SUSE CaaS Platform 4.0 (x86_64): stunnel-5.44-3.8.1 stunnel-debuginfo-5.44-3.8.1 stunnel-debugsource-5.44-3.8.1 References: https://www.suse.com/security/cve/CVE-2021-20230.html https://bugzilla.suse.com/1177580 https://bugzilla.suse.com/1182529 . An important security update for stunnel has been released by SUSE, accompanied by guidelines for applying the patch.. SUSE Security Update, Stunnel Security Issue, Network Update, Linux Software Patch. . Severity: Important. LinuxSecurity.com Team
May 03, 2021
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!