---
- branch: MAIN
  date: Sat Jul 25 03:11:18 UTC 2015
  files:
  - new: '1.96'
    old: '1.95'
    path: pkgsrc/security/stunnel/Makefile
    pathrev: pkgsrc/security/stunnel/Makefile@1.96
    type: modified
  - new: '1.44'
    old: '1.43'
    path: pkgsrc/security/stunnel/distinfo
    pathrev: pkgsrc/security/stunnel/distinfo@1.44
    type: modified
  - new: '1.27'
    old: '1.26'
    path: pkgsrc/security/stunnel/patches/patch-aa
    pathrev: pkgsrc/security/stunnel/patches/patch-aa@1.27
    type: modified
  - new: '1.19'
    old: '1.18'
    path: pkgsrc/security/stunnel/patches/patch-ac
    pathrev: pkgsrc/security/stunnel/patches/patch-ac@1.19
    type: modified
  id: 20150725T031118Z.228e1eb30258faba042b262efd82451473d023cb
  log: |
    Update to 5.20

    Changelog:
    Version 5.20, 2015.07.09, urgency: HIGH
    * Security bugfixes
      - OpenSSL DLLs updated to version 1.0.2d.
        https://www.openssl.org/news/secadv_20150709.txt
    * New features
      - poll(2) re-enabled on MacOS X 10.5 and later.
      - Xcode SDK is automatically used on MacOS X if no other
        locally installed OpenSSL directory is found.
      - The SSL library detection algorithm was made a bit smarter.
      - Warnings about insecure authentication were modified to
        include the name of the affected service section.
      - A warning was added to stunnel.init if no pid file was
        specified in the configuration file (thx to Peter Pentchev).
      - Optional debugging symbols are included in the Win32 installer.
      - Documentation updates (closes Debian bug #781669).
    * Bugfixes
      - Signal pipe reinitialization added to prevent turning the
        main accepting thread into a busy wait loop when an external
        condition breaks the signal pipe.  This bug was found to
        surface on Win32, but other platforms may also be affected.
      - Fixed removing the disabled taskbar icon.
      - Generated temporary DH parameters are used for configuration
        reload instead of the static defaults.
      - LSB compatibility fixes added to the stunnel.init script (thx
        to Peter Pentchev).
      - Fixed the manual page headers (thx to Gleydson Soares).

    Version 5.19, 2015.06.16, urgency: MEDIUM:
    * New features
      - OpenSSL DLLs updated to version 1.0.2c.
      - Added a runtime check whether COMP_zlib() method is implemented
        in order to improve compatibility with the Debian OpenSSL build.
    * Bugfixes
      - Improved socket error handling.
      - Cron thread priority on Win32 platform changed to
        THREAD_PRIORITY_LOWEST to improve portability.
      - Makefile bugfixes for stunnel 5.18 regressions.
      - Fixed some typos in docs and scripts (thx to Peter Pentchev).
      - Fixed a log level check condition (thx to Peter Pentchev).

    Version 5.18, 2015.06.12, urgency: MEDIUM:
    * New features
      - OpenSSL DLLs updated to version 1.0.2b.
        https://www.openssl.org/news/secadv_20150611.txt
      - Added "include" configuration file option to include all
        configuration file parts located in a specified directory.
      - Log file is reopened every 24 hours.  With "log = overwrite"
        this feature can be used to prevent filling up disk space.
      - Temporary DH parameters are refreshed every 24 hours, unless
        static DH parameters were provided in the certificate file.
      - Unique initial DH parameters are distributed with each release.
      - Warnings are logged on potentially insecure authentication.
      - Improved compatibility with the current OpenSSL 1.1.0-dev tree:
        removed RLE compression support, etc.
      - Updated stunnel.spec (thx to Bill Quayle).
    * Bugfixes
      - Fixed handling of dynamic connect targets.
      - Fixed handling of trailing whitespaces in the Content-Length
        header of the NTLM authentication.
      - Fixed --sysconfdir and --localstatedir handling (thx to
        Dagobert Michelsen).
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/stunnel'
  unixtime: '1437793878'
  user: ryoon