Red Hat Product Errata RHBA-2014:1791 - Bug Fix Advisory
Issued:
2014-11-03
Updated:
2014-11-03

RHBA-2014:1791 - Bug Fix Advisory

Synopsis

stunnel bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated stunnel packages that fix one bug are now available for Red Hat
Enterprise Linux 5.

Description

Stunnel is a wrapper for network connections. It can be used to tunnel an
unencrypted network connection over an encrypted connection (encrypted using SSL
or TLS) or to provide an encrypted means of connecting to services that do not
natively support encryption.

This update fixes the following bug:

  • Prior to this update, the stunnel utility always attempted to connect to

servers using the Secure Sockets Layer version 3 (SSLv3) protocol on Red Hat
Enterprise Linux 5. However, many servers have disabled SSLv3 due to security
concerns, such as the POODLE vulnerability. As a consequence, stunnel was not
able to connect to these servers. With this update, stunnel uses a SSL/TLS
handshake compatible with the Transport Layer Security (TLSv1) protocol, which
allows it to connect to servers that do not support SSLv3. Note that it is also
possible to completely disable stunnel client support for SSLv3 by adding
"option = NO_SSLv3" into the stunnel configuration file. (BZ#1144430)

Users of stunnel are advised to upgrade to these updated packages, which fix
this bug.

Solution

Before applying this update, make sure all previously released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
stunnel-4.15-2.el5.2.src.rpm SHA-256: aabc7009a02c43dd17fa3befcc6bb6d7a94cc9f78c53e8168590300f186072a0
x86_64
stunnel-4.15-2.el5.2.x86_64.rpm SHA-256: b4ab349105eae4ee2479f34b4370cc4faea0c310ecbd1a1289a8692817d49624
stunnel-debuginfo-4.15-2.el5.2.x86_64.rpm SHA-256: eb4f3ed420a8e279adb66db680524201aee5f39b287cf05535feb9a09a3f6a8f
ia64
stunnel-4.15-2.el5.2.ia64.rpm SHA-256: 303aa3d36a2645fb0a49482ce2369dec0c6e77476960dbf825405c332e650d04
stunnel-debuginfo-4.15-2.el5.2.ia64.rpm SHA-256: 86d190e68a196654f89e574a21b34e8a285319550684afcbbdd8268259685369
i386
stunnel-4.15-2.el5.2.i386.rpm SHA-256: 4790ccbc643fd2b0b989febb6ad0f5b27f1ee75abf1c14627349504f6b4e1651
stunnel-debuginfo-4.15-2.el5.2.i386.rpm SHA-256: 4a3200b03e9f15107a1b7ce4563b7c22bef48bfac0a14b735a3c0f35be169c3e

Red Hat Enterprise Linux Workstation 5

SRPM
stunnel-4.15-2.el5.2.src.rpm SHA-256: aabc7009a02c43dd17fa3befcc6bb6d7a94cc9f78c53e8168590300f186072a0
x86_64
stunnel-4.15-2.el5.2.x86_64.rpm SHA-256: b4ab349105eae4ee2479f34b4370cc4faea0c310ecbd1a1289a8692817d49624
stunnel-debuginfo-4.15-2.el5.2.x86_64.rpm SHA-256: eb4f3ed420a8e279adb66db680524201aee5f39b287cf05535feb9a09a3f6a8f
i386
stunnel-4.15-2.el5.2.i386.rpm SHA-256: 4790ccbc643fd2b0b989febb6ad0f5b27f1ee75abf1c14627349504f6b4e1651
stunnel-debuginfo-4.15-2.el5.2.i386.rpm SHA-256: 4a3200b03e9f15107a1b7ce4563b7c22bef48bfac0a14b735a3c0f35be169c3e

Red Hat Enterprise Linux Desktop 5

SRPM
stunnel-4.15-2.el5.2.src.rpm SHA-256: aabc7009a02c43dd17fa3befcc6bb6d7a94cc9f78c53e8168590300f186072a0
x86_64
stunnel-4.15-2.el5.2.x86_64.rpm SHA-256: b4ab349105eae4ee2479f34b4370cc4faea0c310ecbd1a1289a8692817d49624
stunnel-debuginfo-4.15-2.el5.2.x86_64.rpm SHA-256: eb4f3ed420a8e279adb66db680524201aee5f39b287cf05535feb9a09a3f6a8f
i386
stunnel-4.15-2.el5.2.i386.rpm SHA-256: 4790ccbc643fd2b0b989febb6ad0f5b27f1ee75abf1c14627349504f6b4e1651
stunnel-debuginfo-4.15-2.el5.2.i386.rpm SHA-256: 4a3200b03e9f15107a1b7ce4563b7c22bef48bfac0a14b735a3c0f35be169c3e

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
stunnel-4.15-2.el5.2.src.rpm SHA-256: aabc7009a02c43dd17fa3befcc6bb6d7a94cc9f78c53e8168590300f186072a0
s390x
stunnel-4.15-2.el5.2.s390x.rpm SHA-256: 8a7a7c5166ccb77444fd62ffe739197b0cf9193df4583e6fa6daa373a508f194
stunnel-debuginfo-4.15-2.el5.2.s390x.rpm SHA-256: 44adf869b8c484991a2fdc3f677702cf3bddf06959425c5fb20a65161ed1bd83

Red Hat Enterprise Linux for Power, big endian 5

SRPM
stunnel-4.15-2.el5.2.src.rpm SHA-256: aabc7009a02c43dd17fa3befcc6bb6d7a94cc9f78c53e8168590300f186072a0
ppc
stunnel-4.15-2.el5.2.ppc.rpm SHA-256: 9f2a76823bec37e249c8ce85bed15e96aa5988f0ed0c44336a1c8e7872b35d18
stunnel-debuginfo-4.15-2.el5.2.ppc.rpm SHA-256: 9532c1bd20af5cb7968235c0bb5ef3afa351665ef0816ff0a7b09c51f17ac545

Red Hat Enterprise Linux Server from RHUI 5

SRPM
stunnel-4.15-2.el5.2.src.rpm SHA-256: aabc7009a02c43dd17fa3befcc6bb6d7a94cc9f78c53e8168590300f186072a0
x86_64
stunnel-4.15-2.el5.2.x86_64.rpm SHA-256: b4ab349105eae4ee2479f34b4370cc4faea0c310ecbd1a1289a8692817d49624
stunnel-debuginfo-4.15-2.el5.2.x86_64.rpm SHA-256: eb4f3ed420a8e279adb66db680524201aee5f39b287cf05535feb9a09a3f6a8f
i386
stunnel-4.15-2.el5.2.i386.rpm SHA-256: 4790ccbc643fd2b0b989febb6ad0f5b27f1ee75abf1c14627349504f6b4e1651
stunnel-debuginfo-4.15-2.el5.2.i386.rpm SHA-256: 4a3200b03e9f15107a1b7ce4563b7c22bef48bfac0a14b735a3c0f35be169c3e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.