Updated stunnel package fixes security vulnerabilities
Publication date: 05 Nov 2026Modification date: 05 Nov 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-70367 , CVE-2026-70368
Description
Localhost-filter bypass in SOCKS server mode. (CVE-2026-70367)
Out-of-bounds memory access when logging long protocol messages.
(CVE-2026-70368)
References
- https://bugs.mageia.org/show_bug.cgi?id=36183
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/472TIVLEO2YOJZVNWJR6RWFE3SX4M7P6/
- https://bugzilla.redhat.com/show_bug.cgi?id=2462083
- https://www.stunnel.org/CVE-2026-70367.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2462029
- https://www.stunnel.org/CVE-2026-70368.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IX766E4H5ND5VOKDYVM2E2GUCKKG6EDD/
- https://www.cve.org/CVERecord?id=CVE-2026-70367
- https://www.cve.org/CVERecord?id=CVE-2026-70368
SRPMS
10/core
- stunnel-5.80-1.mga10