On 2008年7月14日 11:28:44 +0200 Hauke Fath <hf%spg.tu-darmstadt.de@localhost> wrote: > audit-packages(8) has an entry for an stunnel vulnerability > > stunnel<4.24 accepts-revoked-ocsp-cert \ > http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2420 > > which should be restricted to v4.16 .. v4.23, since it concerns OCSP > functionality that e.g. wip/stunnel3 does not have. Fixed, thanks. -Tobias