The mask for the stunnel package is reversed:
while all versions smaller than 3.22 had a bug (according to the comment and
It should be
no, this means that all packages with version smaller than or equal to 3.22 is
masked (that means they can't be installed with emerge).
Closing the bug