已开启
Fix CVE-2026-70367 in stunnel #23
Fix CVE-2026-70367 in stunnel #23
已开启
G7egHN创建于 8月18日
G7egHN
G7egHN
8月18日

Backport stunnel SOCKS destination filter hardening for CVE-2026-70367.

  • CVE: CVE-2026-70367
  • openEuler score: 5.4 (medium)
  • Target product status: openEuler-24.03-LTS-SP4 / stunnel / Affected / none_available-No solution or patch
  • Vendor advisory: https://www.stunnel.org/CVE-2026-70367.html

Local verification:

  • Patch applies cleanly to stunnel 5.69 source.
  • Address filter helper logic rejects 0.0.0.0, 127.0.0.0/8, ::, and IPv4-mapped IPv6 loopback such as ::ffff:127.0.0.1, while allowing a normal public address.
likedislike
合并受阻
G7egHNG7egHN
8月18日 创建了 pull request,commit d0e54345
G7egHN
G7egHN
8月18日 评论:

/check-cla

likedislike
openeuler-ci-botopeneuler-ci-bot成员
8月18日 将small_leek,zhuchunyi,kaitiandu设为审查人
openeuler-ci-botopeneuler-ci-bot成员
8月18日 添加了label:sig/Application
openeuler-ci-bot
openeuler-ci-bot成员
8月18日 评论:

Welcome To openEuler Community

Hey @G7egHN , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: Application ,
and any of the maintainers: @kaitiandu, @small_leek, @zhuchunyi ,
and any of the committers: @caodongxia, @starlet-dx, @wk333 .

likedislike
此处折叠了97条消息 查看更多
openeuler-ci-bot
openeuler-ci-bot成员
8月18日 评论:

aarch64架构构建及构建后检查:multiarch/src-openeuler/aarch64/stunnel/10/console

likedislike
openeuler-ci-bot
openeuler-ci-bot成员
8月18日 评论:

x86_64架构构建及构建后检查:multiarch/src-openeuler/x86-64/stunnel/10/console

likedislike
openeuler-ci-bot
openeuler-ci-bot成员
8月18日 评论:
Check Name Build Result 详情 Build Details
check_binary_file ✅SUCCESS #10
check_lfsconfig ☑️EXCLUDE
check_package_yaml_file ✅SUCCESS
check_repo_in_maintain ✅SUCCESS
check_consistency ✅SUCCESS
check_spec_file ✅SUCCESS
x86_64 check_build ✅SUCCESS #10
check_install ✅SUCCESS
check_license ✅SUCCESS
aarch64 check_build ✅SUCCESS #10
check_install ✅SUCCESS
check_license ✅SUCCESS
likedislike
openeuler-ci-bot
openeuler-ci-bot成员
8月18日 评论:

如下为接口变更检查结果,目标分支为openEuler-24.03-LTS-SP4,请PR提交者check差异信息

Arch Name Check Items Rpm Name Check Result Build Details
compare_package(x86_64) add_rpms ✅SUCCESS #10
delete_rpms ✅SUCCESS
rpm_abi ✅SUCCESS
rpm_cmd ✅SUCCESS
rpm_files ✅SUCCESS
rpm_lib ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
rpm_service ✅SUCCESS
rpm_symbol ✅SUCCESS
compare_package(aarch64) add_rpms ✅SUCCESS #10
delete_rpms ✅SUCCESS
rpm_abi ✅SUCCESS
rpm_cmd ✅SUCCESS
rpm_files ✅SUCCESS
rpm_lib ✅SUCCESS
rpm_provides ✅SUCCESS
rpm_requires ✅SUCCESS
rpm_service ✅SUCCESS
rpm_symbol ✅SUCCESS
likedislike
openeuler-ci-bot
openeuler-ci-bot成员
8月18日 评论:
likedislike