---
- branch: MAIN
  date: Thu Dec  8 19:37:58 UTC 2011
  files:
  - new: '1.76'
    old: '1.75'
    path: pkgsrc/security/stunnel/Makefile
    pathrev: pkgsrc/security/stunnel/Makefile@1.76
    type: modified
  - new: '1.34'
    old: '1.33'
    path: pkgsrc/security/stunnel/distinfo
    pathrev: pkgsrc/security/stunnel/distinfo@1.34
    type: modified
  id: 20111208T193758Z.b78900ae25030f296a211d05eb3b2c2c2b3181b2
  log: |
    Update stunnel to 4.50 (from 4.46).

    Version 4.50, 2011.12.03, urgency: MEDIUM:

        New features
            Added Android port.
            Updated INSTALL.FIPS.
        Bugfixes
            Fixed internal memory allocation problem in inetd mode.
            Fixed FIPS mode on Microsoft Vista, Server 2008, and Windows 7. This fix required to compile OpenSSL FIPS-compliant DLLs with MSVC 9.0, instead of MSVC 10.0. msvcr100.dll was replaced with msvcr90.dll. GPL compatibility issues are explained in the GPL FAQ: http://www.gnu.org/licenses/gpl-faq.html#WindowsRuntimeAndGPL
            POP3 server-side protocol negotiation updated to report STLS capability (thx to Anthony Morgan).

    Version 4.49, 2011.11.28, urgency: MEDIUM:

        Bugfixes
            Missing Microsoft Visual C++ Redistributable (msvcr100.dll) required by FIPS-compliant OpenSSL library was added to the Windows installer.
            A bug was fixed causing crashes on MacOS X and some other platforms.

    Version 4.48, 2011.11.26, urgency: MEDIUM:

        New features
            FIPS support on Win32 platform added. OpenSSL 0.9.8r DLLs based on FIPS 1.2.3 canister are included with this version of stunnel. FIPS mode can be disabled with "fips = no" configuration file option.
        Bugfixes
            Fixed canary initialization problem on Win32 platform.

    Version 4.47, 2011.11.21, urgency: MEDIUM:

        Internal improvements
            CVE-2010-3864 workaround improved to check runtime version of OpenSSL rather than compiled version, and to allow OpenSSL 0.x.x >= 0.9.8p.
            Encoding of man page sources changed to UTF-8.
        Bugfixes
            Handling of socket/SSL close in transfer() function was fixed.
            Logging was modified to save and restore system error codes.
            Option "service" was restricted to Unix, as since stunnel 4.42 it wasn't doing anything useful on Windows platform.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/stunnel'
  unixtime: '1323373078'
  user: jym