Opened 12 months ago

Closed 11 months ago

Last modified 8 months ago

#22285 closed enhancement (fixed)

stunnel-5.76

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: normal Milestone: 13.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New minor version.

Change History (4)

comment:1 by Bruce Dubbs, 11 months ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:2 by Bruce Dubbs, 11 months ago

Version 5.76, 2025.10.18, urgency: MEDIUM

  • Security bugfixes
    • OpenSSL DLLs updated to version 3.5.4.
    • Service-level multivalued options now override (rather than append to) global defaults, preventing unintended configurations.
  • Bugfixes
    • Fixed enabling/disabling of the default fips=yes property.
    • Missing OCSP stapling is no longer logged as an error.
    • Fixed a crash when a PIN was required due to the PKCS#11 CKA_ALWAYS_AUTHENTICATE attribute.
  • Features
    • Quantum-resistant hybrid key agreement X25519+ML-KEM-768 (X25519MLKEM768) used by default with OpenSSL 3.5+ and TLS 1.3.
    • Multiple cert sources are supported, allowing a certificate to be fetched from a provider while loading the chain from a file.
    • Android build switched to a 16 KB page size.

comment:3 by Bruce Dubbs, 11 months ago

Resolution: → fixed
Status: assigned → closed

Fixed at commits 

bade117777 Update to gc-8.2.10.
b145aa44f0 Update to stunnel-5.76.
ca8025eb52 Update to librsvg-2.61.2.
869e7d0bc0 Update to psutil-7.1.1 (Python module).

comment:4 by Bruce Dubbs, 8 months ago

Milestone: 12.5 → 13.0

Milestone renamed

Note: See TracTickets for help on using tickets.