stunnel 5.76 released

'Michał Trojnara' via openssl-users <[email protected]> Sat, 18 Oct 2025 18:04:20 +0200
Newsgroups	gmane.comp.encryption.openssl.user,gmane.network.stunnel.user
Message-ID	<[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------0QxfyDNgkCsL0Im0nS8IEUfj
Content-Type: multipart/mixed; boundary="------------sUyiMLlfFpqjph06v1TfoILh";
 protected-headers="v1"
From: =?UTF-8?Q?Micha=C5=82_Trojnara?= <[email protected]>
To: [email protected], [email protected],
 [email protected]
Message-ID: <0ee51c16-daec-44ec-b169-ef993fbb1217-qit4X2J3Z2JAfugRpC6u6w@public.gmane.org>
Subject: stunnel 5.76 released

--------------sUyiMLlfFpqjph06v1TfoILh
Content-Type: multipart/alternative;
 boundary="------------MBGgssL4NXozqq02bmQ0oqjg"

--------------MBGgssL4NXozqq02bmQ0oqjg
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: quoted-printable

Dear Users,

I have released version 5.76 of stunnel.

### Version 5.76, 2025.10.18, urgency: MEDIUM
* Security bugfixes
 =C2=A0 - OpenSSL DLLs updated to version 3.5.4.
 =C2=A0 - Service-level multivalued options now override (rather than
 =C2=A0 =C2=A0 append to) global defaults, preventing unintended configurat=
ions.
* Bugfixes
 =C2=A0 - Fixed enabling/disabling of the default fips=3Dyes property.
 =C2=A0 - Missing OCSP stapling is no longer logged as an error.
 =C2=A0 - Fixed a crash when a PIN was required due to the PKCS#11
 =C2=A0 =C2=A0 CKA_ALWAYS_AUTHENTICATE attribute.
* Features
 =C2=A0 - Quantum-resistant hybrid key agreement X25519+ML-KEM-768
 =C2=A0 =C2=A0 (X25519MLKEM768) used by default with OpenSSL 3.5+ and TLS 1=
.3.
 =C2=A0 - Multiple cert sources are supported, allowing a certificate to
 =C2=A0 =C2=A0 be fetched from a provider while loading the chain from a fi=
le.
 =C2=A0 - Android build switched to a 16 KB page size.

Home page: https://www.stunnel.org/

Download: https://www.stunnel.org/downloads.html

SHA-256 hashes:
cda37eb4d0fb1e129718ed27ad77b5735e899394ce040bb2be28bbb937fd79e1=20
stunnel-5.76.tar.gz
d93c7c01366d38ebd27689d606e45197ba8e2e2a32d1a186a81d2b01186bfb56=20
stunnel-5.76-win64-installer.exe
f081281c92f6dc245e23d57930f3963d0155a9fc4a707b7414c941e8e60a1957=20
stunnel-5.76-android.zip

Best regards,
 =C2=A0=C2=A0=C2=A0 Mike

--=20
You received this message because you are subscribed to the Google Groups "=
openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msg=
id/openssl-users/0ee51c16-daec-44ec-b169-ef993fbb1217%40stunnel.org.

--------------MBGgssL4NXozqq02bmQ0oqjg
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF-8=
">
  </head>
  <body text=3D"#000000" bgcolor=3D"#FFFFFF">
    <p>Dear Users,</p>
    <p>I have released version 5.76 of stunnel.</p>
    ### Version 5.76, 2025.10.18, urgency: MEDIUM<br>
    * Security bugfixes<br>
    =C2=A0 - OpenSSL DLLs updated to version 3.5.4.<br>
    =C2=A0 - Service-level multivalued options now override (rather than<br=
>
    =C2=A0 =C2=A0 append to) global defaults, preventing unintended
    configurations.<br>
    * Bugfixes<br>
    =C2=A0 - Fixed enabling/disabling of the default fips=3Dyes property.<b=
r>
    =C2=A0 - Missing OCSP stapling is no longer logged as an error.<br>
    =C2=A0 - Fixed a crash when a PIN was required due to the PKCS#11<br>
    =C2=A0 =C2=A0 CKA_ALWAYS_AUTHENTICATE attribute.<br>
    * Features<br>
    =C2=A0 - Quantum-resistant hybrid key agreement X25519+ML-KEM-768<br>
    =C2=A0 =C2=A0 (X25519MLKEM768) used by default with OpenSSL 3.5+ and TL=
S 1.3.<br>
    =C2=A0 - Multiple cert sources are supported, allowing a certificate to=
<br>
    =C2=A0 =C2=A0 be fetched from a provider while loading the chain from a=
 file.<br>
    =C2=A0 - Android build switched to a 16 KB page size.
    <p>Home page: <a class=3D"moz-txt-link-freetext"
        href=3D"https://www.stunnel.org/" moz-do-not-send=3D"true">https://=
www.stunnel.org/</a></p>
    <p>Download: <a class=3D"moz-txt-link-freetext"
        href=3D"https://www.stunnel.org/downloads.html"
        moz-do-not-send=3D"true">https://www.stunnel.org/downloads.html</a>=
</p>
    SHA-256 hashes:<br>
    <font face=3D"monospace">cda37eb4d0fb1e129718ed27ad77b5735e899394ce040b=
b2be28bbb937fd79e1=C2=A0
      stunnel-5.76.tar.gz<br>
    </font><font face=3D"monospace">d93c7c01366d38ebd27689d606e45197ba8e2e2=
a32d1a186a81d2b01186bfb56=C2=A0
      stunnel-5.76-win64-installer.exe<br>
      f081281c92f6dc245e23d57930f3963d0155a9fc4a707b7414c941e8e60a1957=C2=
=A0
      stunnel-5.76-android.zip</font>
    <p>Best regards,<br>
      =C2=A0=C2=A0=C2=A0 Mike</p>
  </body>
</html>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;openssl-users&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org">openssl-us=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/a/openss=
l.org/d/msgid/openssl-users/0ee51c16-daec-44ec-b169-ef993fbb1217%40stunnel.=
org?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/a/ope=
nssl.org/d/msgid/openssl-users/0ee51c16-daec-44ec-b169-ef993fbb1217%40stunn=
el.org</a>.<br />

--------------MBGgssL4NXozqq02bmQ0oqjg--

--------------sUyiMLlfFpqjph06v1TfoILh--

--------------0QxfyDNgkCsL0Im0nS8IEUfj
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=Zeo/
-----END PGP SIGNATURE-----

--------------0QxfyDNgkCsL0Im0nS8IEUfj--