Dear Users,
I have released version 5.76 of stunnel.
### Version 5.76, 2025.10.18, urgency: MEDIUM
* Security bugfixes
- OpenSSL DLLs updated to version 3.5.4.
- Service-level multivalued options now override (rather than
append to) global defaults, preventing unintended configurations.
* Bugfixes
- Fixed enabling/disabling of the default fips=yes property.
- Missing OCSP stapling is no longer logged as an error.
- Fixed a crash when a PIN was required due to the PKCS#11
CKA_ALWAYS_AUTHENTICATE attribute.
* Features
- Quantum-resistant hybrid key agreement X25519+ML-KEM-768
(X25519MLKEM768) used by default with OpenSSL 3.5+ and TLS 1.3.
- Multiple cert sources are supported, allowing a certificate to
be fetched from a provider while loading the chain from a file.
- Android build switched to a 16 KB page size.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
cda37eb4d0fb1e129718ed27ad77b5735e899394ce040bb2be28bbb937fd79e1
stunnel-5.76.tar.gz
d93c7c01366d38ebd27689d606e45197ba8e2e2a32d1a186a81d2b01186bfb56
stunnel-5.76-win64-installer.exe
f081281c92f6dc245e23d57930f3963d0155a9fc4a707b7414c941e8e60a1957
stunnel-5.76-android.zip
Best regards,
Mike
