stunnel security update

[cudiaco]

1)
Description: Ubuntu 16.04.4 LTS
Release: 16.04

2)
apt-cache policy stunnel4
stunnel4:
  Installed: 3:5.30-1ubuntu0.1
  Candidate: 3:5.30-1ubuntu0.1
  Version table:
 *** 3:5.30-1ubuntu0.1 500
        500 http://mirrors.digitalocean.com/ubuntu xenial-updates/universe amd64 Packages
        100 /var/lib/dpkg/status
     3:5.30-1 500
        500 http://mirrors.digitalocean.com/ubuntu xenial/universe amd64 Packages
        500 http://archive.ubuntu.com/ubuntu xenial/universe amd64 Packages

3)
the installed version of stunnel should be 5.45

4)
The bundled version of stunnel on Xenial is v5.30, where as releases up to the latest (v5.45) have had many security related issues resolved.

changelog: https://www.stunnel.org/sdf_ChangeLog.html

Thank you.

[Marc Deslauriers (mdeslaur)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

[cudiaco (bigmakvoodoo)]

@mdeslaur, thanks for the info, I'll do that.

[Launchpad Janitor (janitor)]

[Expired for stunnel4 (Ubuntu) because there has been no activity for 60 days.]