CVS commit: pkgsrc/security/stunnel

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Thu Feb 26 14:49:47 UTC 2026

Modified Files:
        pkgsrc/security/stunnel: Makefile distinfo

Log Message:
security/stunnel: Update to 5.77

Changelog:
### Version 5.77, 2026.02.17, urgency: MEDIUM
* Security bugfixes
  - OpenSSL DLLs updated to version 3.5.5.
* Bugfixes
  - Avoid attempting to fetch OCSP stapling for PSK-only
    configuration sections.
* Features
  - Merged applicable patches from Fedora and Debian:
    - Use SOURCE_DATE_EPOCH for reproducible builds.
    - Skip the OpenSSL version check when AUTOPKGTEST_TMP is set.
    - Enable PrivateTmp in the stunnel.service template.
    - Clarify the manual page for the "curves" option.
  - Log client IP addresses on TLS errors.

### Version 5.76, 2025.10.18, urgency: MEDIUM
* Security bugfixes
  - OpenSSL DLLs updated to version 3.5.4.
  - Service-level multivalued options now override (rather than
    append to) global defaults, preventing unintended configurations.
* Bugfixes
  - Fixed enabling/disabling of the default fips=yes property.
  - Missing OCSP stapling is no longer logged as an error.
  - Fixed a crash when a PIN was required due to the PKCS#11
    CKA_ALWAYS_AUTHENTICATE attribute.
* Features
  - Quantum-resistant hybrid key agreement X25519+ML-KEM-768
    (X25519MLKEM768) used by default with OpenSSL 3.5+ and TLS 1.3.
  - Multiple cert sources are supported, allowing a certificate to
    be fetched from a provider while loading the chain from a file.
  - Android build switched to a 16 KB page size.


To generate a diff of this commit:
cvs rdiff -u -r1.134 -r1.135 pkgsrc/security/stunnel/Makefile
cvs rdiff -u -r1.74 -r1.75 pkgsrc/security/stunnel/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/stunnel/Makefile
diff -u pkgsrc/security/stunnel/Makefile:1.134 pkgsrc/security/stunnel/Makefile:1.135
--- pkgsrc/security/stunnel/Makefile:1.134      Sat Dec 20 14:50:34 2025
+++ pkgsrc/security/stunnel/Makefile    Thu Feb 26 14:49:47 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.134 2025/12/20 14:50:34 nia Exp $
+# $NetBSD: Makefile,v 1.135 2026/02/26 14:49:47 ryoon Exp $
 
-DISTNAME=              stunnel-5.75
+DISTNAME=              stunnel-5.77
 CATEGORIES=            security
 MASTER_SITES=          https://www.stunnel.org/archive/5.x/
 

Index: pkgsrc/security/stunnel/distinfo
diff -u pkgsrc/security/stunnel/distinfo:1.74 pkgsrc/security/stunnel/distinfo:1.75
--- pkgsrc/security/stunnel/distinfo:1.74       Sun Aug 31 14:59:00 2025
+++ pkgsrc/security/stunnel/distinfo    Thu Feb 26 14:49:47 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.74 2025/08/31 14:59:00 jym Exp $
+$NetBSD: distinfo,v 1.75 2026/02/26 14:49:47 ryoon Exp $
 
-BLAKE2s (stunnel-5.75.tar.gz) = f3b0de7ddf1268ddb4871a012c69dddb82c3bdfef99aed5558ac61a745704dd2
-SHA512 (stunnel-5.75.tar.gz) = ce1d7d1c1534389ae39f2aa838c10b5631c36e88ce1bafc3249fee30130eeb86937808a22c3886dd6598fccf8c63bf965a64b60600a1287aef42b87bd19e7ee7
-Size (stunnel-5.75.tar.gz) = 921591 bytes
+BLAKE2s (stunnel-5.77.tar.gz) = 014f83d63508ea87a6f7581414cc533baa34b4c43e511cf6492e364ce62b2c22
+SHA512 (stunnel-5.77.tar.gz) = 271c7d60678fe6f21209454e693636058578698b7c2c3b6b820a0ac32ce5cb4fa42935f28c3a000baad616a678995a5b6863504c2118e0749f1d44434daf5e5b
+Size (stunnel-5.77.tar.gz) = 924510 bytes
 SHA1 (patch-aa) = 80c2fef87fa42e46c7baa0b317e2639308f7387c
 SHA1 (patch-configure) = 92ac2abab05f7c9a3a074a10dd0d9206e7547a78
 SHA1 (patch-stunnel.conf-sample.in) = 9edaabd1bc15d3ff8524178f4a6aba4a7963b015