stunnel-5.82

[Bruce Dubbs]

New minor version.

[Joe Locash]

### Version 5.81, 2026.09.16, urgency: HIGH
* Security bugfixes
  - OpenSSL DLLs updated to version 3.5.8.
  - Fixed truncation and out-of-bounds reads when inheriting binary
    session ticket keys containing null bytes (thanks to Jose A. Diaz).
  - Prevented OCSP stapling response failures from terminating the
    daemon (thanks to Jose A. Diaz).
* Bugfixes
  - Avoided spurious sysconf error messages after successful descriptor-limit
    queries on platforms where a successful call may change errno.
  - Fixed a potential crash when parsing empty ASCII PSK secrets
    (thanks to Jose A. Diaz).
  - Fixed a memory leak after DTLS listener poll errors and timeouts
    (thanks to Jose A. Diaz).
  - Fixed memory leaks during NTLM HTTP proxy negotiation
    (thanks to Jose A. Diaz).
  - Fixed early startup logging before thread lock initialization
    (thanks to Jose A. Diaz).
  - Rejected excessively nested configuration includes instead of
    consuming the process stack recursively.
* Features
  - Improved TLS and DTLS shutdown diagnostics.

Fixed at 1254d4ab53. Leaving open for SA.

[Bruce Dubbs]

Advisory sa-13.1-030 has been issued.

[Bruce Dubbs]

Now version 5.82.

[Bruce Dubbs]

Version 5.82, 2026.09.17, urgency: MEDIUM

• Bugfixes
  • Fixed premature connection closure on macOS when the peer half-closed the plaintext connection while data still needed to be forwarded.
• Features
  • Build compatibility with LibreSSL 4.3.2

[Bruce Dubbs]

Fixed at commits:

5edb9dc652 Update to nfs-utils-3.1.1.
6ea7f02b86 Update to HTML-Parser-3.86 (Perl module).
0383305b27 Update to stunnel-5.82.