{"id":144089,"date":"2025-10-03T17:12:04","date_gmt":"2025-10-03T15:12:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera"},"modified":"2025-10-03T17:12:04","modified_gmt":"2025-10-03T15:12:04","slug":"vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera","title":{"rendered":"Lansarea OpenSSL 3.6.0 cu suport pentru EVP_SKEY \u0219i eliminarea dep\u0103\u0219irii buffer-ului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A avut loc lansarea bibliotecii OpenSSL 3.6.0, care ofer\u0103 implementarea protocoalelor SSL\/TLS \u0219i a diferitelor algoritmi de criptare. OpenSSL 3.6 este considerat un release cu termen obi\u0219nuit de suport, actualizarile fiind emise timp de 13 luni. Suportul pentru versiunile anterioare OpenSSL 3.5 LTS, 3.4, 3.3, 3.2 \u0219i 3.0 LTS va dura p\u00e2n\u0103 \u00een aprilie 2030, octombrie 2026, aprilie 2026, noiembrie 2025 \u0219i septembrie 2026, respectiv. Codul proiectului este distribuit sub licen\u021ba Apache 2.0.     <\/p>\n<p>Principalele nout\u0103\u021bi:   <\/p>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat suport pentru structura EVP_SKEY (Cle\u0219te simetric) pentru a reprezenta cheile simetrice ca obiecte opace. Spre deosebire de cheile raw, reprezentate ca un array de octe\u021bi, \u00een structura EVP_SKEY cheia este abstractizat\u0103 \u0219i con\u021bine metadate suplimentare. Se permite utilizarea EVP_SKEY \u00een func\u021biile de criptare, schimb de chei \u0219i generare a cheilor (KDF). Pentru lucru cu cheile EVP_SKEY au fost ad\u0103ugate func\u021biile EVP_KDF_CTX_set_SKEY(), EVP_KDF_derive_SKEY() \u0219i EVP_PKEY_derive_SKEY().\n<li class=\"l\"> A fost ad\u0103ugat suport pentru verificarea semn\u0103turilor digitale bazate pe schema LMS (Leighton-Micali Signatures), care utilizeaz\u0103 func\u021bii hash \u0219i hashing \u00een form\u0103 de arbori Merkle (Merkle Tree, fiecare ramur\u0103 verific\u00e2nd toate ramurile \u0219i nodurile de dedesubt). Semn\u0103turile digitale LMS sunt rezistente la atacuri cu calculatoare cuantice \u0219i sunt concepute pentru a asigura integritatea firmware-ului \u0219i aplica\u021biilor.\n<li class=\"l\"> A fost ad\u0103ugat suport pentru categoriile de securitate NIST pentru parametrii obiectelor PKEY (chei publice \u0219i private). Stabilirea categoriei de securitate se face prin setarea \u201esecurity-category\u201d. A fost ad\u0103ugat\u0103 func\u021bia EVP_PKEY_get_security_category() pentru a verifica nivelul de securitate. Nivelul de securitate reflect\u0103 rezisten\u021ba la atacurile cuantice \u0219i poate lua valori \u00eentregi de la 0 la 5:\n<ul>\n<li class=\"l\"> 0 \u2014 implementare care nu este rezistent\u0103 la atacurile cuantice;\n<li class=\"l\">  1\/3\/5 \u2014 implementarea nu exclude c\u0103utarea \u00een computere cuantice a unei chei \u00een cifrarea blocurilor cu chei de 128\/192\/256 bi\u021bi;\n<li class=\"l\">  2\/4 \u2014 implementarea nu exclude c\u0103utarea \u00een computere cuantice a coliziunilor \u00een hash-uri de 256\/384 bi\u021bi).   <\/ul>\n<li class=\"l\"> A fost ad\u0103ugat\u0103 comanda \u201eopenssl configutl\u201d pentru a procesa fi\u0219ierul de configurare. Utilitarul permite, pe baza unei configura\u021bii multi-fi\u0219ier cu inclusiuni, s\u0103 genereze un fi\u0219ier rezumat cu toate set\u0103rile.\n<li class=\"l\"> \u00cen furnizorul de criptografie FIPS a fost ad\u0103ugat\u0103 suportul pentru generarea determinist\u0103 a semn\u0103turilor digitale ECDSA (acelea\u0219i date de intrare genereaz\u0103 aceea\u0219i semn\u0103tur\u0103), conform cerin\u021belor standardului FIPS 186-5.\n<li class=\"l\"> Cererile pentru mediul de compilare au fost ridicate. Pentru a compila OpenSSL nu mai este suficient un instrumentar cu suport pentru ANSI-C \u0219i este necesar un compilator compatibil cu standardul C-99.\n<li class=\"l\"> Func\u021biile legate de structura EVP_PKEY_ASN1_METHOD au fost declarate \u00eenvechite.\n<li class=\"l\"> Suportul pentru platforma VxWorks a fost oprit.                  <\/ul>\n<p>Vulnerabilit\u0103\u021bi corectate:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2025-9230 \u2014 o vulnerabilitate \u00een codul de decriptare a mesajelor CMS, criptate folosind o parol\u0103 (PWRI). Vulnerabilitatea poate duce la scrierea \u0219i citirea datelor \u00een afara buffer-ului rezervat, permi\u021b\u00e2nd ini\u021bierea unei termin\u0103ri anormale sau coruperea memoriei \u00eentr-o aplica\u021bie care utilizeaz\u0103 OpenSSL pentru a procesa mesajele CMS. Nu se exclude exploatarea vulnerabilit\u0103\u021bii pentru a desf\u0103\u0219ura codul propriu, dar pericolul problemei este redus de faptul c\u0103 criptarea mesajelor CMS utiliz\u00e2nd parola este \u00een practic\u0103 extrem de rar utilizat\u0103. \u00cen afar\u0103 de versiunea OpenSSL 3.6.0, vulnerabilitatea a fost remediat\u0103 \u00een versiunile OpenSSL 3.5.4, 3.4.3, 3.3.5, 3.2.6 \u0219i 3.0.18. Problema a fost, de asemenea, corectat\u0103 \u00een actualiz\u0103rile bibliotecii LibreSSL 4.0.1 \u0219i 4.1.1, dezvoltate de proiectul OpenBSD.\n<li class=\"l\"> CVE-2025-9231 \u2014 implementarea algoritmului SM2 este vulnerabil\u0103 la atacurile prin canale laterale, care permit pe sistemele cu CPU ARM de 64 de bi\u021bi s\u0103 recreeze cheia privat\u0103 prin analizarea modific\u0103rii timpului de execu\u021bie al anumitor calcule. Poten\u021bial, atacul poate fi efectuat de la distan\u021b\u0103. Pericolul atacului este redus de faptul c\u0103 OpenSSL nu suport\u0103 direct utilizarea certificatelor cu chei SM2 \u00een TLS.\n<li class=\"l\"> CVE-2025-9232 \u2014 o vulnerabilitate \u00een implementarea clientului HTTP \u00eencorporat, care duce la citirea datelor din afara buffer-ului atunci c\u00e2nd se proceseaz\u0103 un URL special format \u00een func\u021biile Client HTTP. Problema se manifest\u0103 doar atunci c\u00e2nd variabila de mediu \u201eno_proxy\u201d este setat\u0103 \u0219i poate provoca \u00eentreruperea aplica\u021biei.           <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=63979\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.6.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 3.6 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.5 LTS, 3.4, 3.3, 3.2 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430, \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430, \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043d\u043e\u044f\u0431\u0440\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-144089","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.6.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenSSL 3.6.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 EVP_SKEY \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.6.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-10-03T15:12:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-10-03T15:12:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea OpenSSL 3.6.0 cu suport pentru EVP_SKEY \u0219i corectarea unei erori de dep\u0103\u0219ire a buffer-ului | ProHoster","description":"A avut loc lansarea bibliotecii OpenSSL 3.6.0, care ofer\u0103 implementarea protocoalelor SSL\/TLS \u0219i a diferitelor algoritmi de criptare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenSSL 3.6.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 EVP_SKEY \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.6.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-openssl-3-6-0-s-podderzhkoj-evp_skey-i-ustraneniem-perepolneniya-bufera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-03T15:12:04+00:00","article:modified_time":"2025-10-03T15:12:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"144089","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 15:06:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:06:19","updated":"2026-01-23 15:06:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/144089","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=144089"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/144089\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=144089"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=144089"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=144089"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}