Red Hat Security Advisory

RHSA-2021:0620

stunnel security update

Released 2021-02-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v. 8.1) stunnel-5.48-6.el8_1

Fixes 1 record

TI-2021-03525 CVE-2021-20230 · GHSA-wwrq-59mq-v8w2

Improper certificate validation in stunnel

LOW 35

A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01179 Published 2021-02-23 Fixed CWE-295