OpenTofu
OpenTofu keeps patching the 1.12 line after opening 1.13 with Symbol Libraries
A side-by-side editorial comparison of Libreswan and Stirling-PDF — release velocity, themes, recent moves, and the top alternatives to consider.
Libreswan patches four CVEs on two lines, two of them credited to Claude and Ada Logics.
Libreswan is an IPsec VPN implementation for Linux and the BSDs. On October 5 it released 5.4.1 and 5.3.3 together: 5.4.1 fixes three CVEs (null-pointer crashes on unexpected EAP and empty PKCS7 payloads, and a use-after-free on EOF in IKE over TCP), and 5.3.3 fixes the same three plus a FIPS certificate-leak denial of service. v5.4 in August remains the latest feature release, adding ML-KEM 768 post-quantum key exchange via RFC 9370.
Stirling PDF's 3.x line ships bulk processing, org-wide signing and fortnightly feature releases
Stirling PDF 3.0 in late September added the PDF Processor for running tools across folders, FTP or S3 sources, optional AI classification and extraction, free OAuth SSO and a free allowance of 1,000 automated PDFs a month. Releases since have arrived about every two weeks: 3.1.0 made group signing (Stirling Sign) default for new users and trialled an embedded Office converter, 3.2.0 replaced the multi-tool with a Page Editor and let password-protected PDFs be used without removing the password, and 3.2.1 and 3.2.2 added viewer and annotation features.
Libreswan is an IPsec VPN implementation for Linux and the BSDs. On October 5 it released 5.4.1 and 5.3.3 together: 5.4.1 fixes three CVEs (null-pointer crashes on unexpected EAP and empty PKCS7 payloads, and a use-after-free on EOF in IKE over TCP), and 5.3.3 fixes the same three plus a FIPS certificate-leak denial of service. v5.4 in August remains the latest feature release, adding ML-KEM 768 post-quantum key exchange via RFC 9370.
Security response dominates the release history: 5.3.1, 5.3.2, 5.3.3 and 5.4.1 are all CVE releases, with 5.4 the one feature release among them. Recent CVEs credit AI-assisted audits, so the find rate may stay high while that tooling runs over the codebase.
Expect further point releases on both the 5.3 and 5.4 lines while 5.3 is still maintained. The entries do not show when a 5.5 feature release is due.
Stirling PDF 3.0 in late September added the PDF Processor for running tools across folders, FTP or S3 sources, optional AI classification and extraction, free OAuth SSO and a free allowance of 1,000 automated PDFs a month. Releases since have arrived about every two weeks: 3.1.0 made group signing (Stirling Sign) default for new users and trialled an embedded Office converter, 3.2.0 replaced the multi-tool with a Page Editor and let password-protected PDFs be used without removing the password, and 3.2.1 and 3.2.2 added viewer and annotation features.
The product is moving from a self-hosted toolbox to an automation and workflow platform with metered hosted services attached. Feature releases come quickly, with visible regressions fixed in the next point release.
Expect Stirling Office Convert to move toward default and native desktop, as the 3.1.0 notes say is planned, plus continued Processor work.
Other DevOps products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Libreswan or Stirling-PDF.
OpenTofu keeps patching the 1.12 line after opening 1.13 with Symbol Libraries
Argo CD's 3.6 candidates have narrowed to cherry-picked fixes
Betaflight grew a real autopilot: waypoint missions, geofence RTH and MAVLink ground control
Barman 3.20.1 closes a CVE that let a writable catalog delete unrelated snapshots.
WildFly 42 brings virtual threads to Jakarta Concurrency.
Apollo 3.0 moves to Java 17 and pitches configuration management at AI agents.
See all Libreswan alternatives → · See all Stirling-PDF alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Libreswan and Stirling-PDF are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Libreswan and Stirling-PDF are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other DevOps products to evaluate alongside.
Top Libreswan alternatives in DevOps are ranked by recent ship velocity. Browse the "Libreswan alternatives" section above for the current picks, or visit /alternatives/libreswan for the full list with editorial commentary on each.
Top Stirling-PDF alternatives in DevOps are ranked by recent ship velocity. Browse the "Stirling-PDF alternatives" section above for the current picks, or visit /alternatives/stirling-pdf for the full list with editorial commentary on each.