{"id":144089,"date":"2025-10-03T17:12:04","date_gmt":"2025-10-03T15:12:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera"},"modified":"2025-10-03T17:12:04","modified_gmt":"2025-10-03T15:12:04","slug":"vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera","title":{"rendered":"OpenSSL 3.6.0 v\u00e4ljalaskmine, mis toetab EVP_SKEY ja puhastab m\u00e4lu \u00fclevoolu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V\u00e4lja lastud on OpenSSL 3.6.0 raamatukogu, mis pakub SSL\/TLS protokollide ja erinevate kr\u00fcpteerimisalgoritmide teostust. OpenSSL 3.6 kuulub tavap\u00e4raste toetuste alla, mille v\u00e4rskendused ilmuvad 13 kuu jooksul. Eelmiste versioonide OpenSSL 3.5 LTS, 3.4, 3.3, 3.2 ja 3.0 LTS tugi kestab kuni aprilli 2030, oktoobri 2026, aprilli 2026, novembri 2025 ja septembri 2026 vastavalt. Projekti kood on litsentseeritud Apache 2.0 all.     <\/p>\n<p>Peamised uuendused:   <\/p>\n<ul>\n<li class=\"l\"> Lisatud on EVP_SKEY (s\u00fcmbiootiline v\u00f5ti) struktuuri toetamine, et esitada s\u00fcmbiootilisi v\u00f5tmeid kui l\u00e4bipaistmatuid objekte. Erinevalt toorv\u00f5tmetest, mis on esitatud baitide massiivina, abstraheeritakse EVP_SKEY v\u00f5tme struktuur ja sisaldab t\u00e4iendavaid metaandmeid. EVP_SKEY kasutamine on lubatud kr\u00fcpteerimise, v\u00f5tmevahetuse ja v\u00f5tme genereerimise (KDF) funktsioonides. EVP_SKEY v\u00f5tmetega t\u00f6\u00f6tamiseks on lisatud funktsioonid EVP_KDF_CTX_set_SKEY(), EVP_KDF_derive_SKEY() ja EVP_PKEY_derive_SKEY().\n<li class=\"l\"> Lisatud on digitaalsete allkirjade verifitseerimise tugi LMS (Leighton-Micali allkirjad) skeemi p\u00f5hjal, mis kasutab r\u00e4sifunktsioone ja puustruktuuri r\u00e4simist Merkle puu kujul (iga oks verifitseerib k\u00f5ik madalamad oksad ja s\u00f5lmed). LMS digitaalsete allkirjade vastupidavus kvantkompuuteri r\u00fcnnakutele on loodud seadmete ja rakenduste terviklikkuse kinnitamiseks.\n<li class=\"l\"> Lisatud toetus NISTi turbekategooriatele PKEY objektide parameetrites (avatud ja suletud v\u00f5tmed). Turbekategooria seadistamine toimub seadete kaudu \"security-category\". Turbe taseme kontrollimiseks on lisatud funktsioon EVP_PKEY_get_security_category(). Turbe tase peegeldab vastupidavust kvantarvutite sissetungimisele ja v\u00f5ib omada t\u00e4isarve vahemikus 0 kuni 5:\n<ul>\n<li class=\"l\"> 0 \u2014 rakendus, mis ei ole kvantarvutite r\u00fcnnaku suhtes kaitstud;\n<li class=\"l\">  1\/3\/5 \u2014 rakendus ei v\u00e4lista kvantarvutil v\u00f5tme otsingut 128\/192\/256-bitiste blokksiftide puhul;\n<li class=\"l\">  2\/4 \u2014 rakendus ei v\u00e4lista kvantarvutil 256\/384-bitise r\u00e4siga kokkulangevuste otsingut).   <\/ul>\n<li class=\"l\"> Lisatud k\u00e4sk \"openssl configutl\" konfiguratsioonifaili t\u00f6\u00f6tlemiseks. Utiliit v\u00f5imaldab mitme faili konfiguratsioonil, millel on include-viidatud failid, luua kokkuv\u00f5ttefail, kus on k\u00f5ik seadistused.\n<li class=\"l\"> FIPS kr\u00fcptopakkujas on lisatud toetust ECDSA digitaalsete allkirjade m\u00e4\u00e4ratletud genereerimisele (sama sisendi korral genereeritakse sama allkiri), vastavalt FIPS 186-5 standardi n\u00f5uetele.\n<li class=\"l\"> T\u00f5stetud on n\u00f5uded koostamise keskkonnale. OpenSSL-i koostamiseks ei piisa enam ainult ANSI-C toe pakkujast, vajatakse C-99 standardiga \u00fchilduvat kompilaatorit.\n<li class=\"l\"> EVP_PKEY_ASN1_METHOD struktuuriga seotud funktsioonid on deklareeritud aegunuks.\n<li class=\"l\"> Toetuse l\u00f5petamine platvormile VxWorks.                  <\/ul>\n<p>Parandatud haavatavused:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2025-9230 \u2014 juhuslikkuse haavatavus CMS-s\u00f5numite dekr\u00fcpteerimise koodis, mis on kr\u00fcpteeritud parooli (PWRI) abil. Haavatavus v\u00f5ib viia andmete kirjutamise ja lugemise eraldatud m\u00e4lust v\u00e4lja, mis v\u00f5imaldab tekitada avariilisi l\u00f5petamisi v\u00f5i m\u00e4lu kahjustamist rakenduses, mis kasutab OpenSSL CMS-s\u00f5numite t\u00f6\u00f6tlemiseks. Haavatavuse \u00e4rakasutamist ei saa v\u00e4listada, et korraldada oma koodi k\u00e4ivitamist, kuid probleemi ohtu v\u00e4hendab see, et CMS-s\u00f5numite kr\u00fcpteerimist parooli abil kasutatakse praktikas \u00e4\u00e4rmiselt harva. Lisaks OpenSSL versioonile 3.6.0 on haavatavus k\u00f5rvaldatud versioonides OpenSSL 3.5.4, 3.4.3, 3.3.5, 3.2.6 ja 3.0.18. Probleem on ka parandatud LibreSSL 4.0.1 ja 4.1.1 raamatukogude v\u00e4rskendustes, mida arendab OpenBSD projekt.\n<li class=\"l\"> CVE-2025-9231 \u2014 SM2 algoritmi rakendus on vastuv\u00f5tlik k\u00fclgmiste kanalite r\u00fcnnakutele, mis v\u00f5imaldab 64-bitiste ARM CPU s\u00fcsteemides taastada privaatv\u00f5tme, anal\u00fc\u00fcsides \u00fcksikute arvutuste t\u00e4itmise aja muutusi. Potentsiaalselt v\u00f5ib r\u00fcnnaku l\u00e4bi viia kaugelt. R\u00fcnnaku ohtu v\u00e4hendab see, et OpenSSL ei toeta otseselt SM2 v\u00f5tmetega sertifikaatide kasutamist TLS-is.\n<li class=\"l\"> CVE-2025-9232 \u2014 haavatavus sisseehitatud HTTP-klientide rakenduses, mis v\u00f5imaldab lugeda andmeid m\u00e4lukohast v\u00e4ljaspool pufferit, kui t\u00f6\u00f6deldakse spetsiaalselt vormindatud URL-i HTTP Clienit. Probleem ilmneb ainult siis, kui on seatud keskkonnamuutuja \u00abno_proxy\u00bb ja see v\u00f5ib p\u00f5hjustada rakenduse kokkujooksmist.           <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63979\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.6.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 3.6 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.5 LTS, 3.4, 3.3, 3.2 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430, \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430, \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043d\u043e\u044f\u0431\u0440\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-144089","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.6.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenSSL 3.6.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 EVP_SKEY \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.6.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-10-03T15:12:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-10-03T15:12:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSL 3.6.0 v\u00e4ljaanne EVP_SKEY toe ja puhver\u00fclekande k\u00f5rvaldamisega | ProHoster","description":"OpenSSL 3.6.0 teek on v\u00e4lja antud, pakkudes SSL\/TLS protokollide ja erinevate kr\u00fcptimisalgoritmide rakendusi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenSSL 3.6.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 EVP_SKEY \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.6.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-03T15:12:04+00:00","article:modified_time":"2025-10-03T15:12:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"144089","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 15:06:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:06:19","updated":"2026-01-23 15:06:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/144089","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=144089"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/144089\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=144089"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=144089"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=144089"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}