Package: stunnel4
Version: 3:5.39-2
Severity: important
Tags: upstream patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hey!

Upstream author complained on Twitter that stunnel as shipped in
Stretch is buggy and unusable due to a memory leak:

https://twitter.com/mtrojnar/status/877039486508707841

He proposes the following patch which doesn't not totally apply on top
of our 5.39 but he says that this is not a complete fix:

https://twitter.com/mtrojnar/status/877114292373422080

If you are more familiar than me with the codebase, maybe you could
determine the best way to fix that. The title is a bit vague and I set
the severity to important, but maybe you'll want to upgrade if you
think it should be fixed in stable.

- -- System Information:
Debian Release: 9.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (101, 
'experimental-debug'), (101, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.11.0-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8), LANGUAGE=en_US:en 
(charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages stunnel4 depends on:
ii  adduser      3.115
ii  libc6        2.24-12
ii  libssl1.1    1.1.0f-3
ii  libsystemd0  233-9
ii  libwrap0     7.6.q-26
ii  lsb-base     9.20161125
ii  netbase      5.4
ii  openssl      1.1.0f-3
ii  perl         5.24.1-3

stunnel4 recommends no packages.

Versions of packages stunnel4 suggests:
pn  logcheck-database  <none>

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
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=sEUM
-----END PGP SIGNATURE-----

Reply via email to