A new version of stunnel is now available in the Cygwin distribution. This version includes a security fix: * OCSP code was fixed to properly reject revocated certificates.
The full upstream changelog is available at http://www.stunnel.org/download/ChangeLog.txt, or in /usr/share/doc/stunnel/ChangeLog. If you use OCSP in stunnel, I strongly recommend that you upgrade your stunnel package immediately. If you don't use OCSP, then you don't need this update, but it shouldn't hurt either. You'll probably want to upgrade anyway, because previous versions of stunnel have been removed from the Cygwin archive, so setup will keep bothering you about it until you do upgrade. Andrew E. Schulman ******************************************************************* To update your installation, click on the "Install Cygwin now" link on the http://cygwin.com/ web page. This downloads setup.exe to your system. Then, run setup and answer all of the questions. *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: [EMAIL PROTECTED] If you need more information on unsubscribing, start reading here: http://sources.redhat.com/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/