stunnel 5.76 released

'Michał Trojnara' via openssl-users <[email protected]> Sat, 18 Oct 2025 18:04:20 +0200

Newsgroups	gmane.comp.encryption.openssl.user,gmane.network.stunnel.user
Message-ID	<[email protected]>

Dear Users,

I have released version 5.76 of stunnel.

### Version 5.76, 2025.10.18, urgency: MEDIUM
* Security bugfixes
- OpenSSL DLLs updated to version 3.5.4.
- Service-level multivalued options now override (rather than
append to) global defaults, preventing unintended configurations.
* Bugfixes
- Fixed enabling/disabling of the default fips=yes property.
- Missing OCSP stapling is no longer logged as an error.
- Fixed a crash when a PIN was required due to the PKCS#11
CKA_ALWAYS_AUTHENTICATE attribute.
* Features
- Quantum-resistant hybrid key agreement X25519+ML-KEM-768
(X25519MLKEM768) used by default with OpenSSL 3.5+ and TLS 1.3.
- Multiple cert sources are supported, allowing a certificate to
be fetched from a provider while loading the chain from a file.
- Android build switched to a 16 KB page size.

Home page: https://www.stunnel.org/

Download: https://www.stunnel.org/downloads.html

SHA-256 hashes:
cda37eb4d0fb1e129718ed27ad77b5735e899394ce040bb2be28bbb937fd79e1
stunnel-5.76.tar.gz
d93c7c01366d38ebd27689d606e45197ba8e2e2a32d1a186a81d2b01186bfb56
stunnel-5.76-win64-installer.exe
f081281c92f6dc245e23d57930f3963d0155a9fc4a707b7414c941e8e60a1957
stunnel-5.76-android.zip

Best regards,
Mike

--
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/0ee51c16-daec-44ec-b169-ef993fbb1217%40stunnel.org.

OpenPGP_signature.asc (application/pgp-signature, 840 B)