{"id":169694,"date":"2026-04-21T18:24:39","date_gmt":"2026-04-21T16:24:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/libressl-4-3-0"},"modified":"2026-04-21T18:24:39","modified_gmt":"2026-04-21T16:24:39","slug":"libressl-4-3-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/libressl-4-3-0","title":{"rendered":"LibreSSL 4.3.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Il progetto LibreSSL ha annunciato il rilascio della versione 4.3.0, che \u00e8 gi\u00e0 disponibile sui mirror di OpenBSD.<\/p>\n<p>Si tratta di una versione di sviluppo per il ramo 4.3.x, quindi gli sviluppatori invitano la comunit\u00e0 a partecipare attivamente ai test. Non sono previste ulteriori modifiche all'API e all'ABI nel ramo 4.3.<\/p>\n<p>Una delle novit\u00e0 principali di questa versione \u00e8 il supporto per il metodo di scambio delle chiavi post-quantistiche MLKEM768_X25519 in TLS, in conformit\u00e0 con la bozza IETF draft-ietf-tls-ecdhe-mlkem. \u00c8 stato corretto un errore di \u00aboff-by-one\u00bb nel controllo della profondit\u00e0 del certificato X.509, che potrebbe portare a sovrascrivere 4 byte in memoria quando si lavora con malintenzionati <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/server\/dts-prohoster\/\" title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a> o con la verifica dei certificati client abilitata. La profondit\u00e0 massima \u00e8 ora limitata a 32. Il problema \u00e8 stato scoperto dalla Calif.io in collaborazione con Claude e Anthropic Research.<\/p>\n<p>Miglioramenti interni:<\/p>\n<ul>\n<li>Sono stati rimossi frammenti di codice obsoleti, residui del supporto per SSLv2 e SSLv3\/TLS 1.0.<\/li>\n<li>Funzione ec_point_cmp() riscritta.<\/li>\n<li>A DH_check() \u00e8 stato aggiunto un percorso rapido per numeri primi DH ben noti, compresi i numeri RFC 7919.<\/li>\n<\/ul>\n<p>Modifiche alla compatibilit\u00e0:<\/p>\n<ul>\n<li>Rimossi numerosi macro BN_* non utilizzati con nomi non informativi (BN_LONG, BN_BITS4, BN_MASK2, ecc.).<\/li>\n<li>openssl(1) cms non accetta pi\u00f9 chiavi non supportate -compress e -uncompress.<\/li>\n<li>Aggiunto il flag PKCS7_NO_DUAL_CONTENT per un comportamento compatibile con alcuni binding linguistici.<\/li>\n<\/ul>\n<p>Correzioni di bug:<\/p>\n<ul>\n<li>Eliminati i leak di memoria in CMS_EncryptedData_encrypt() e nref_nos().<\/li>\n<li>Corretto il codifica delle stringhe di bit con zeri finali.<\/li>\n<li>Risolto il crash durante l'analisi di PKCS#12 e delle risposte timestamp.<\/li>\n<li>Corrette diverse anomalie in libtls (verifiche di lunghezza, coerenza nei messaggi di errore).<\/li>\n<\/ul>\n<p>Altro:<\/p>\n<ul>\n<li>In libssl aggiunta la supporto per l'algoritmo RSASSA-PSS con OID.<\/li>\n<li>Aggiunte all'API pubblica le funzioni X509_VERIFY_PARAM_set_hostflags() e SSL_SESSION_dup().<\/li>\n<li>BIGNUM ora utilizza i tipi standard C99 (uint64_t\/uint32_t), risolvendo problemi su Windows a 64 bit.<\/li>\n<\/ul>\n<p>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/bsd\/18270274\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 4.3.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430\u0445 OpenBSD. \u042d\u0442\u043e development-\u0432\u044b\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 4.3.x, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 API \u0438 ABI \u0432 \u0432\u0435\u0442\u043a\u0435 4.3 \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 MLKEM768_X25519 \u0432 TLS \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0447\u0435\u0440\u043d\u043e\u0432\u0438\u043a\u043e\u043c IETF draft-ietf-tls-ecdhe-mlkem. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-169694","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 4.3.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430\u0445 OpenBSD. \u042d\u0442\u043e development-\u0432\u044b\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 4.3.x, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 API \u0438 ABI \u0432 \u0432\u0435\u0442\u043a\u0435 4.3 \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 MLKEM768_X25519 \u0432 TLS \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0447\u0435\u0440\u043d\u043e\u0432\u0438\u043a\u043e\u043c IETF draft-ietf-tls-ecdhe-mlkem. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/libressl-4-3-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47LibreSSL 4.3.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 4.3.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430\u0445 OpenBSD. \u042d\u0442\u043e development-\u0432\u044b\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 4.3.x, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 API \u0438 ABI \u0432 \u0432\u0435\u0442\u043a\u0435 4.3 \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 MLKEM768_X25519 \u0432 TLS \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0447\u0435\u0440\u043d\u043e\u0432\u0438\u043a\u043e\u043c IETF draft-ietf-tls-ecdhe-mlkem. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/libressl-4-3-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-21T16:24:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-21T16:24:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47LibreSSL 4.3.0 | ProHoster","description":"Il progetto LibreSSL ha annunciato il rilascio della versione 4.3.0, gi\u00e0 disponibile nei mirror OpenBSD. Si tratta di un rilascio di sviluppo per il ramo 4.3.x, pertanto gli sviluppatori invitano la comunit\u00e0 a testare attivamente. Non sono previsti ulteriori cambiamenti di API e ABI nel ramo 4.3. La novit\u00e0 principale di questa versione \u00e8 il supporto del metodo di scambio chiave post-quantistico MLKEM768_X25519 in TLS secondo il draft IETF draft-ietf-tls-ecdhe-mlkem. Risolta","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/libressl-4-3-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47LibreSSL 4.3.0 | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 4.3.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430\u0445 OpenBSD. \u042d\u0442\u043e development-\u0432\u044b\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 4.3.x, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 API \u0438 ABI \u0432 \u0432\u0435\u0442\u043a\u0435 4.3 \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 MLKEM768_X25519 \u0432 TLS \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0447\u0435\u0440\u043d\u043e\u0432\u0438\u043a\u043e\u043c IETF draft-ietf-tls-ecdhe-mlkem. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/libressl-4-3-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-21T16:24:39+00:00","article:modified_time":"2026-04-21T16:24:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/169694","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=169694"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/169694\/revisions"}],"predecessor-version":[{"id":170734,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/169694\/revisions\/170734"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=169694"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=169694"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=169694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}