{"id":169694,"date":"2026-04-21T18:24:39","date_gmt":"2026-04-21T16:24:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/libressl-4-3-0"},"modified":"2026-04-21T18:24:39","modified_gmt":"2026-04-21T16:24:39","slug":"libressl-4-3-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/libressl-4-3-0","title":{"rendered":"LibreSSL 4.3.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Il progetto LibreSSL ha annunciato il rilascio della versione 4.3.0, gi\u00e0 disponibile nei mirror di OpenBSD.<\/p>\n<p>Questo \u00e8 un rilascio di sviluppo per il ramo 4.3.x, pertanto gli sviluppatori invitano la comunit\u00e0 a testarlo attivamente. Non sono previsti ulteriori cambiamenti all'API e all'ABI nel ramo 4.3.<\/p>\n<p>La principale novit\u00e0 di questa versione \u00e8 il supporto del metodo di scambio chiavi post-quantistico MLKEM768_X25519 in TLS, secondo la bozza dell'IETF draft-ietf-tls-ecdhe-mlkem. Risolto un errore \u00aboff-by-one\u00bb nel controllo della profondit\u00e0 del certificato X.509, che poteva portare a sovrascrivere 4 byte di memoria durante l'uso di codice malevolo <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/server\/dts-prohoster\/\" title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a> o con la verifica dei certificati client attivata. La profondit\u00e0 massima \u00e8 ora limitata a 32. Il problema \u00e8 stato scoperto da Calif.io in collaborazione con Claude e Anthropic Research.<\/p>\n<p>Miglioramenti interni:<\/p>\n<ul>\n<li>Rimossi frammenti di codice obsoleti risalenti al supporto di SSLv2 e SSLv3\/TLS 1.0.<\/li>\n<li>Rifatto ec_point_cmp().<\/li>\n<li>Aggiunto un percorso veloce in DH_check() per numeri primi DH ben noti, inclusi quelli RFC 7919.<\/li>\n<\/ul>\n<p>Cambiamenti di compatibilit\u00e0:<\/p>\n<ul>\n<li>Rimossi numerosi macro BN_* non utilizzati con nomi poco informativi (BN_LONG, BN_BITS4, BN_MASK2, ecc.).<\/li>\n<li>openssl(1) cms non accetta pi\u00f9 chiavi non supportate -compress e -uncompress.<\/li>\n<li>Aggiunta la flag PKCS7_NO_DUAL_CONTENT per un comportamento compatibile con alcuni binding linguistici.<\/li>\n<\/ul>\n<p>Correzioni di errori:<\/p>\n<ul>\n<li>Risolte perdite di memoria in CMS_EncryptedData_encrypt() e nref_nos().<\/li>\n<li>Corretto il codice delle stringhe di bit con zeri finali.<\/li>\n<li>Risolto un crash durante l'analisi di PKCS#12 e delle risposte timestamp.<\/li>\n<li>Corrette numerose vulnerabilit\u00e0 in libtls (controlli di lunghezza, coerenza dei messaggi di errore).<\/li>\n<\/ul>\n<p>Altro:<\/p>\n<ul>\n<li>In libssl \u00e8 stato aggiunto il supporto per l'algoritmo RSASSA-PSS con OID.<\/li>\n<li>Nell'API pubblica sono state aggiunte le funzioni X509_VERIFY_PARAM_set_hostflags() e SSL_SESSION_dup().<\/li>\n<li>BIGNUM ora utilizza i tipi standard C99 (uint64_t\/uint32_t), risolvendo problemi su Windows a 64 bit.<\/li>\n<\/ul>\n<p>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/bsd\/18270274\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 4.3.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430\u0445 OpenBSD. \u042d\u0442\u043e development-\u0432\u044b\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 4.3.x, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 API \u0438 ABI \u0432 \u0432\u0435\u0442\u043a\u0435 4.3 \u043d\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0442\u0430\u043b\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 MLKEM768_X25519 \u0432 TLS \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0447\u0435\u0440\u043d\u043e\u0432\u0438\u043a\u043e\u043c IETF draft-ietf-tls-ecdhe-mlkem. \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-169694","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 4.3.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430\u0445 OpenBSD. \u042d\u0442\u043e development-\u0432\u044b\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 4.3.x, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/libressl-4-3-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47LibreSSL 4.3.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 4.3.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430\u0445 OpenBSD. \u042d\u0442\u043e development-\u0432\u044b\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 4.3.x, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/libressl-4-3-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-21T16:24:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-21T16:24:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47LibreSSL 4.3.0 | ProHoster","description":"Il progetto LibreSSL ha annunciato il rilascio della versione 4.3.0, gi\u00e0 disponibile nei mirror di OpenBSD. Questo \u00e8 un rilascio di sviluppo per il ramo 4.3.x, pertanto gli sviluppatori invitano la comunit\u00e0 a testarlo attivamente.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/libressl-4-3-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47LibreSSL 4.3.0 | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 4.3.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430\u0445 OpenBSD. \u042d\u0442\u043e development-\u0432\u044b\u043f\u0443\u0441\u043a \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 4.3.x, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/libressl-4-3-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-21T16:24:39+00:00","article:modified_time":"2026-04-21T16:24:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/169694","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=169694"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/169694\/revisions"}],"predecessor-version":[{"id":170734,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/169694\/revisions\/170734"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=169694"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=169694"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=169694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}