Red Hat Bugzilla – Bug 98593
CAN-2002-1563 Stunnel unsafe SIGCHLD handler
Last modified: 2007-11-30 17:06:53 EST
When configured to listen for incoming connections (instead of being
invoked by xinetd), stunnel can either be configured to start either a
thread or a process to handle each new connection. If Stunnel is configured
to start a new child process to handle each connection, it will receive a
SIGCHLD signal when that child exits.
Stunnel versions prior to 4.04 would perform tasks in the SIGCHLD signal
handler which, if interrupted by another SIGCHLD signal, could be unsafe.
This could lead to a Denial of Service.
Errata with backported security fix in progress
An errata has been issued which should help the problem described in this bug report.
This report is therefore being closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, please follow the link below. You may reopen
this bug report if the solution does not work for you.