{"id":"MGASA-2026-0575","summary":"Updated stunnel package fixes security vulnerabilities","details":"Localhost-filter bypass in SOCKS server mode. (CVE-2026-70367)\nOut-of-bounds memory access when logging long protocol messages.\n(CVE-2026-70368)\n","modified":"2026-11-05T05:15:03.017191528Z","published":"2026-11-05T05:11:54Z","upstream":["CVE-2026-70367","CVE-2026-70368"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0575.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36183"},{"type":"WEB","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/472TIVLEO2YOJZVNWJR6RWFE3SX4M7P6/"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462083"},{"type":"ADVISORY","url":"https://www.stunnel.org/CVE-2026-70367.html"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462029"},{"type":"ADVISORY","url":"https://www.stunnel.org/CVE-2026-70368.html"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IX766E4H5ND5VOKDYVM2E2GUCKKG6EDD/"}],"affected":[{"package":{"name":"stunnel","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/stunnel?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.80-1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0575.json"}}],"schema_version":"1.9.2","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}