Accepting request 1282545 from security:Stunnel

OBS-URL: https://build.opensuse.org/request/show/1282545
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/stunnel?expand=0&rev=46

stunnel-5.72.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEK8fk5n48wMG+py+MLvx/8NQW4BQFAmXAl5kACgkQLvx/8NQW
-4BSnAxAAxC0u/yksf+byWhqkl1txYaZ7tKv6sg8QramWhyCpnlEtBgxCP3I3baae
-PQm5HkVgOHNSFNhzrIApEeaXJle4rgH7T+uRkl5mThWYMf47h55Ll70BBg3Mpsjz
-iwubuWllA4cyEbd2yWYl1MTzcSxY8F05otQdg+vwIxrHNF26k+pvnYUfBJiw6/7V
-1exig3ZF03umSGM/8JTRdkJw4oKxgWR0nvAY6s6C28Hs6ok+700r40pDinmQgYyC
-Sb1DC2/SAjFhs8vlxUBtgWCLTQk/uGKWXUjPoG2KqQyhKMfY3ntZT3D9iOWpvC/p
-vvZbd3k27a8/D4CyBiBSh+L/bZtOgdZrDPCDxbf2EG1zC8mBjA8A8NIzMVL0D3UL
-FHKpPBpw5RMy7Zbrwn59ggVoTSJS8Bcr1khmUjpyTpCnbTOSdsIhFDG5EtPOkJoT
-k/6qXMxFAUL8EX3PlPjMSSs8aPWB7BqSEowRYbMGxG7Iqr+z56LiTdGjra+JY6Pv
-FrLHHqGB9Hh3YIYbbf5O61DkXNeDVEZlqd03CI5Q9v5r9OKnIdzg4NM3XJ2hBUf4
-PuYKWMhg2gZTwTuQtEV7Py+52sbqdiKCiWyQy3P8vRV/RwKuu/+2vPsxUIxULFEV
-0FSBp+BPuM/FPiYwqNam/C67qHZ03jndiOgsTRapsJnAFKT/nXQ=
-=vtS5
------END PGP SIGNATURE-----

stunnel-5.75.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:0c1ef0ed85240974dccb94fe74fb92d6383474c7c0d10e8796d1f781a3ba5683
+size 921591

stunnel-5.75.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=gX+m
+-----END PGP SIGNATURE-----

stunnel.changes

@@ -1,3 +1,56 @@
+-------------------------------------------------------------------
+Tue Jun  3 11:37:37 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to version 5.75:
+  * Security bugfixes
+    - OpenSSL FIPS Provider updated to version 3.1.2.
+  * Bugfixes
+    - Fixed infinite loop triggered by OCSP URL parsing errors
+    - Fixed OPENSSL_NO_OCSP build issues
+    - Fixed default curve selection in FIPS mode with OpenSSL 3.4+.
+    - Fixed tests with modern Python versions.
+    - Fixed tests with multiple OpenSSL versions installed.
+  * Features
+    - Added provider URI support for "cert" and "key" options.
+    - Added new "CAstore" service-level option (OpenSSL 3.0+).
+    - Added "provider" (OpenSSL 3.0+), "providerParameter"
+      (OpenSSL 3.5+), and "setEnv" global options.
+    - Key file/URI path added to passphrase prompt on Unix.
+
+-------------------------------------------------------------------
+Tue Jan  7 09:32:26 UTC 2025 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to version 5.74:
+  * Bugfixes
+    - Fixed a stapling cache deallocation crash.
+    - Fixed "redirect" with protocol negotiation.
+  * Features
+    - "protocolHost" support for "socks" protocol clients.
+    - More detailed logs in OpenSSL 3.0 or later.
+
+-------------------------------------------------------------------
+Thu Oct  3 06:40:55 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 5.73:
+  * Security bugfixes:
+    - OpenSSL FIPS Provider updated to version 3.0.9.
+  * Bugfixes:
+    - Fixed a memory leak while reloading stunnel.conf sections
+      with "client=yes" and "delay=no".
+    - Fixed TIMEOUTocsp with values greater than 4.
+    - Fix the IPv6 test on a non-IPv6 machine.
+  * Features:
+    - HELO replaced with EHLO in the post-STARTTLS SMTP protocol
+      negotiation (thx to Peter Pentchev).
+    - OCSP stapling fetches moved away from server threads.
+    - Improved client-side session resumption.
+    - Added support for the mimalloc allocator.
+    - Check for protocolHost moved to configuration file processing
+      for the client-side CONNECT protocol.
+    - Clarified some confusing OpenSSL's certificate verification
+      error messages.
+    - Improved NetBSD compatibility.
+
 -------------------------------------------------------------------
 Mon Feb 26 13:29:20 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
 

stunnel.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package stunnel
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,7 +22,7 @@
   %define _fillupdir %{_localstatedir}/adm/fillup-templates
 %endif
 Name:           stunnel
-Version:        5.72
+Version:        5.75
 Release:        0
 Summary:        Universal TLS Tunnel
 License:        GPL-2.0-or-later
@@ -106,6 +106,7 @@ sed -i 's/-m 1770//g' tools/Makefile.in
 mkdir -p %{buildroot}%{_docdir}
 mv %{buildroot}%{_datadir}/doc/stunnel %{buildroot}%{_docdir}/
 mkdir -p %{buildroot}%{_docdir}/stunnel/tools
+cp tools/openssl.cnf %{buildroot}%{_docdir}/stunnel/tools
 mkdir -p %{buildroot}%{_fillupdir}
 cp -p %{SOURCE3} %{buildroot}%{_fillupdir}/
 install -D -m 0644 %{buildroot}%{_docdir}/stunnel/examples/stunnel.service %{buildroot}/%{_unitdir}/stunnel.service
@@ -177,5 +178,6 @@ fi
 
 %files doc
 %doc %{_docdir}/%{name}
+%doc %{_docdir}/%{name}/tools
 
 %changelog