| Summary: | stunnel needs updating to Version 4.50, 2011.12.03 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Bit Twister <bittwister2> |
| Component: | RPM Packages | Assignee: | Mageia Bug Squad <bugsquad> |
| Status: | RESOLVED WONTFIX | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | dan, davidwhodgins, guillomovitch, luigiwalser, mageia |
| Version: | 1 | ||
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| See Also: | https://bugs.mageia.org/show_bug.cgi?id=4223 | ||
| Whiteboard: | |||
| Source RPM: | stunnel-4.34-3.mga1.src.rpm | CVE: | |
| Status comment: | |||
| Bug Depends on: | 4223 | ||
| Bug Blocks: | |||
|
Description
Bit Twister
2011-12-30 17:40:52 CET
(In reply to comment #0) > > It would be nice is someone could make the /etc/stunnel/stunnel.conf > and rpm install run in a chroot environment like bind/named. :) Would not hurt to have rpm package create the chroot directory. I was able to get it to run chroot'ed by moving setuid/uid commands below "pid =" Also changed chroot to /var/run/stunnel and set "client = no" for extra security. My working conf file has these settings $ grep -v ';' /etc/stunnel/stunnel.conf | uniq sslVersion = SSLv3 chroot = /var/run/stunnel/ pid = /stunnel.pid setuid = nobody setgid = nogroup socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 client = no [smtp-tls-wrapper] accept = 11125 client = yes connect = outgoing.verizon.net:465
Manuel Hiebel
2011-12-31 16:22:13 CET
CC:
(none) =>
mageia Only way I was able to get the set uid/gid to work was to chmod 777 /var/run/stunnel.
For the permissions to survive a reboot I created stunnel_prestart.sh and added a call to it in /lib/systemd/system/stunnel.service with
ExecStartPre=/local/bin/stunnel_prestart.sh
$ grep -v \# stunnel_prestart.sh
mkdir -p /var/run/stunnel
chmod 777 /var/run/stunnel
Bit Twister
2012-02-22 18:11:46 CET
Source RPM:
stunnel =>
stunnel-4.34-3.mga1.src.rpm Hi, This bug was filed against cauldron, but we do not have cauldron at the moment. Please report whether this bug is still valid for Mageia 2. Thanks :) Cheers, marja Keywords:
(none) =>
NEEDINFO (In reply to comment #3) > Please report whether this bug is still valid for Mageia 2. Yes. Keywords:
NEEDINFO =>
(none)
Manuel Hiebel
2012-06-17 16:14:48 CEST
Keywords:
(none) =>
Junior_job Thanks for the report. This package is unmaintained. Would you be interested in becoming a packager and fixing this package? It also has a security vulnerability, CVE-2011-2940: http://lwn.net/Vulnerabilities/484778/ Component:
RPM Packages =>
Security
David Walser
2012-08-03 22:12:53 CEST
See Also:
(none) =>
https://bugs.mageia.org/show_bug.cgi?id=4223 I just updated the cauldron package to 4.53, and added your systemd unit file. For the other changes, feel free to apply for a maintainer account, as suggested by David. CC:
(none) =>
guillomovitch
David Walser
2012-08-14 15:45:33 CEST
Version:
Cauldron =>
2 If you're rebuilding stunnel anyway, you could take a look at the other problems in bug #4223. CC:
(none) =>
dan I just backported 4.53-3.mga2 from cauldron to update_testing. Thanks Guillaume. Mageia 1 needs the update too. I'll push this to QA when that's available. SRPM for Mageia 2: stunnel-4.53-3.mga2.src.rpm Installation failed: file /usr/lib64/libstunnel.so from install of stunnel-4.53-3.mga2.x86_64 conflicts with file from package lib64stunnel0-4.34-3.mga1.x86_64 CC:
(none) =>
davidwhodgins The files in libstunnel0 were moved back into the main stunnel package, since they aren't used by anything outside of stunnel itself. I guess the stunnel package needs to Obsolete the old libs. Upon further inspection, the security issue only affects 4.40 and 4.41, so this is just a regular bug. Component:
Security =>
RPM Packages (stunnel is in 4.53 in mga2 since the update of today https://bugs.mageia.org/show_bug.cgi?id=4223) Whiteboard:
MGA1TOO =>
(none) This message is a reminder that Mageia 1 is nearing its end of life. In approximately 25 days from now, Mageia will stop maintaining and issuing updates for Mageia 1. At that time this bug will be closed as WONTFIX (EOL) if it remains open with a Mageia 'version' of '1'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Mageia version prior to Mageia 1's end of life. Bug Reporter: Thank you for reporting this issue and we are sorry that we may not be able to fix it before Mageia 1 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Mageia, you are encouraged to click on "Version" and change it against that version of Mageia. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Mageia release includes newer upstream software that fixes bugs or makes them obsolete. -- Mageia Bugsquad Mageia 1 changed to end-of-life (EOL) status on ''1st December''. Mageia 1 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Mageia please feel free to click on "Version" change it against that version of Mageia and reopen this bug. Thank you for reporting this bug and we are sorry it could not be fixed. -- Mageia Bugsquad Status:
NEW =>
RESOLVED |