Accepting request 230920 from home:stroeder:branches:security:Stunnel

Update to upstream version 5.01.

OBS-URL: https://build.opensuse.org/request/show/230920
OBS-URL: https://build.opensuse.org/package/show/security:Stunnel/stunnel?expand=0&rev=66

stunnel-5.00.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:84d7bf45b8943cfcbc681ff6a4bb465697bb3bded42198c97fa29465cb7aa134
-size 475803

stunnel-5.01.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2565bf58ffe8a612304c64df621105b2e42d6e389e815ed4205dbeec4f3f886b
+size 587962

stunnel-5.01.tar.gz.asc

@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.12 (GNU/Linux)
+
+iD8DBQBTRB8p/NU+nXTHMtERAuu+AJ0RbdhAdqv9GKgLfidKMaZkJncBpwCg75h+
+QXYuKm/e79azQ0Q/IXIqopk=
+=wewG
+-----END PGP SIGNATURE-----

stunnel-5.01.tar.gz.sha256

@@ -0,0 +1 @@
+2565bf58ffe8a612304c64df621105b2e42d6e389e815ed4205dbeec4f3f886b  stunnel-5.01.tar.gz

stunnel.changes

@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Sun Apr 20 17:37:59 UTC 2014 - michael@stroeder.com
+
+- update to upstream v5.01 code
+- original ChangeLog:
+    Security bugfixes
+        OpenSSL DLLs updated to version 1.0.1g. This version mitigates TLS heartbeat read overrun (CVE-2014-0160).
+    New features
+        X.509 extensions added to the created self-signed stunnel.pem.
+        "FIPS = no" also allowed in non-FIPS builds of stunnel.
+        Search all certificates with the same subject name for a matching public key rather than only the first one (thx to Leon Winter).
+        Create logs in the local application data folder if stunnel folder is not writable on Win32.
+    Bugfixes
+        close_notify not sent when SSL still has some data buffered.
+        Protocol negotiation with server-side SNI fixed.
+        A Mac OS X missing symbols fixed.
+        Win32 configuration file reload crash fixed.
+        Added s_pool_free() on exec+connect service retires.
+        Line-buffering enforced on stderr output.
+
 -------------------------------------------------------------------
 Thu Mar  6 16:06:04 UTC 2014 - drahn@suse.com
 

stunnel.spec

@@ -19,7 +19,7 @@ BuildRequires:  gcc-c++ tcp_wrappers
 %endif
 Summary:        Universal SSL Tunnel
 License:        GNU Library General Public License v. 2.0 and 2.1 (LGPL)
-Version:        5.00
+Version:        5.01
 Release:        0
 Group:          Productivity/Networking/Security
 URL:            http://www.stunnel.org/
@@ -27,7 +27,7 @@ Autoreqprov:    on
 %if %{?suse_version:%suse_version}%{?!suse_version:0} > 800
 PreReq:         /usr/sbin/useradd fileutils textutils %insserv_prereq %fillup_prereq
 %endif
-Source:         ftp://ftp.stunnel.org/stunnel/%{name}-%{version}.tar.bz2
+Source:         ftp://ftp.stunnel.org/stunnel/%{name}-%{version}.tar.gz
 Source1:        stunnel.conf
 Source2:        stunnel.README
 Source3:        sysconfig.syslog-stunnel
@@ -65,7 +65,7 @@ This package contains additional documentation of the universal SSL tunnel
 stunnel.
 
 %prep
-%setup -q -n stunnel-5.00
+%setup -q -n stunnel-%{version}
 %patch0 -p0 
 %patch1 -p0