{"slug": "libressl-4-4-released-with-post-quantum-tls-improvements-security-fixes", "title": "LibreSSL 4.4 Released with Post-Quantum TLS Improvements, Security Fixes", "summary": "LibreSSL 4.4.0, the first stable release of the 4.4.x series and part of OpenBSD 8.0, ships with libtls preferring the X25519MLKEM768 hybrid key exchange for TLS 1.3 connections, combining elliptic-curve cryptography with the post-quantum ML-KEM algorithm. The release removes the eMudhra emSign ECC Root CA – G3 certificate from the default bundle after weaknesses were found in keys used by some subordinate certificate authorities, and fixes an OCSP responder authorization bypass affecting OpenBSD's nc and ftp utilities when used with the muststaple option. LibreSSL 4.4 also fixes X.509 name constraints validation, caps DTLS handshake buffering to limit memory use from fragmented messages, and stops reinstalling LibreSSL from overwriting an existing cert.pem file.", "body_md": "[LibreSSL](https://www.libressl.org/) 4.4 has been released as the first stable version of the 4.4.x series, introducing security fixes, TLS handling improvements, and expanded platform compatibility. The new release, also included in [OpenBSD 8.0](https://linuxiac.com/openbsd-8-0-released-with-64-vcpu-vm-support-intel-arc-graphics/), builds on LibreSSL 4.3 with changes affecting certificate validation, cryptographic operations, and the library’s TLS implementation.\n\nOne notable change is that LibreSSL now prefers X25519MLKEM768 for TLS 1.3 connections established through libtls. This hybrid key exchange combines traditional elliptic-curve cryptography with ML-KEM, a post-quantum algorithm designed to resist attacks from future quantum computers.\n\nOn the security side, LibreSSL 4.4 removes the eMudhra emSign ECC Root CA – G3 certificate from its default certificate bundle after weaknesses were identified in keys used by some subordinate certificate authorities. Uncompromised intermediate certificates have been added to maintain interoperability.\n\nAdministrators should note that reinstalling LibreSSL no longer overwrites an existing `cert.pem` file. Systems may require a manual certificate bundle update if their package manager does not handle the removal automatically.\n\nThe release also addresses an OCSP responder authorization bypass affecting clients configured to require certificate stapling. According to the developers, the only known affected applications are OpenBSD’s `nc` and `ftp` utilities when used with the `muststaple` option.\n\nAdditional security improvements include fixes for X.509 name constraints validation, where specially crafted URI user information could bypass hostname checks. IPv6 address handling has been corrected. DTLS handshake buffering now has size limits to prevent excessive memory consumption caused by fragmented handshake messages.\n\nTLS reliability receives several fixes as well. These include better handling of TLS 1.3 HelloRetryRequest messages, stricter ALPN negotiation that rejects protocols not advertised by the client, and corrections to TLS 1.2 connections using custom elliptic-curve lists.\n\nOn the performance front, SHA-3 operations benefit from an optimized, unrolled and interleaved implementation. LibreSSL improves memory handling by allocating TLS 1.3 receive buffers only when needed, alongside numerous internal cleanups to DTLS and certificate-processing code.\n\nCompatibility improvements extend across several platforms, including support for building on macOS 27, fixes for Windows networking and memory handling, and build corrections for AIX. The release enables additional assembly optimizations on ARM64 and RISC-V systems.\n\nFinally, the update improves regression testing for DTLS and TLS renegotiation, while adjusting the testing framework to rely on memory rather than files.\n\nFor more information, see the [LibreSSL 4.4.0 release notes](https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.4.0-relnotes.txt).", "url": "https://wpnews.pro/news/libressl-4-4-released-with-post-quantum-tls-improvements-security-fixes", "canonical_source": "https://linuxiac.com/libressl-4-4-released-with-post-quantum-tls-improvements-security-fixes/", "published_at": "2026-10-23 10:53:44+00:00", "updated_at": "2026-10-23 11:14:23.922947+00:00", "lang": "en", "topics": ["artificial-intelligence"], "entities": ["LibreSSL", "OpenBSD", "X25519MLKEM768", "ML-KEM", "eMudhra emSign ECC Root CA – G3"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/libressl-4-4-released-with-post-quantum-tls-improvements-security-fixes", "markdown": "https://wpnews.pro/news/libressl-4-4-released-with-post-quantum-tls-improvements-security-fixes.md", "text": "https://wpnews.pro/news/libressl-4-4-released-with-post-quantum-tls-improvements-security-fixes.txt", "jsonld": "https://wpnews.pro/news/libressl-4-4-released-with-post-quantum-tls-improvements-security-fixes.jsonld"}}