{"id":170353,"date":"2026-05-04T12:24:42","date_gmt":"2026-05-04T10:24:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej"},"modified":"2026-05-04T12:24:42","modified_gmt":"2026-05-04T10:24:42","slug":"vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej","title":{"rendered":"Vyd\u00e1n\u00ed Dropbear SSH 2026.90 s opravou zranitelnost\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Byl zve\u0159ejn\u011bn v\u00fdstup projektu Dropbear 2026.90, kter\u00fd vyv\u00edj\u00ed SSH server a klient, st\u00e1vaj\u00edc\u00ed se b\u011b\u017en\u00fdm v bezdr\u00e1tov\u00fdch routerech a kompaktn\u00edch distribuc\u00edch, jako je OpenWrt. Dropbear se vyzna\u010duje n\u00edzkou spot\u0159ebou pam\u011bti, mo\u017enost\u00ed vypnout nadbyte\u010dn\u00e9 funkce b\u011bhem sestaven\u00ed a podporou pro sestaven\u00ed klienta a serveru v jednom spustiteln\u00e9m souboru podle vzoru busybox. P\u0159i statick\u00e9m spojen\u00ed s uClibc zab\u00edr\u00e1 spustiteln\u00fd soubor Dropbear pouze 110 kB. Dropbear podporuje p\u0159esm\u011brov\u00e1n\u00ed X11, je kompatibiln\u00ed se souborem kl\u00ed\u010d\u016f OpenSSH (~\/.ssh\/authorized_keys) a dok\u00e1\u017ee vytv\u00e1\u0159et multispojov\u00e1n\u00ed s p\u0159esm\u011brov\u00e1n\u00edm p\u0159es tranzitn\u00ed hostitel. K\u00f3d projektu je naps\u00e1n v jazyce C a je distribuov\u00e1n pod licenc\u00ed bl\u00edzkou MIT.      <\/p>\n<p>V nov\u00e9 verzi bylo opraveno n\u011bkolik bezpe\u010dnostn\u00edch probl\u00e9m\u016f:  <\/p>\n<ul>\n<li class=\"l\"> Nedostate\u010dn\u00e9 odstran\u011bn\u00ed zranitelnosti v scp (CVE-2019-6111), kter\u00e1 dovolila p\u0159episov\u00e1n\u00ed jin\u00fdch soubor\u016f p\u0159i p\u0159ipojen\u00ed k \u0161kodliv\u00e9mu <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-shicago\/\" title=\"serveru\" data-wpil-keyword-link=\"linked\">serveru<\/a>. P\u0159i pou\u017eit\u00ed scp <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/\"   title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a> rozhoduje, kter\u00e9 soubory a adres\u00e1\u0159e m\u00e1 odeslat klientovi, p\u0159i\u010dem\u017e klient pouze kontroluje spr\u00e1vnost vr\u00e1cen\u00fdch n\u00e1zv\u016f objekt\u016f. Kontrola na stran\u011b klienta blokuje p\u0159ekro\u010den\u00ed aktu\u00e1ln\u00edho adres\u00e1\u0159e (&#171;..&#187;), ale v p\u0159\u00edpad\u011b rekurzivn\u00edho kop\u00edrov\u00e1n\u00ed (-r) nezohled\u0148uje p\u0159\u00edpady p\u0159ed\u00e1n\u00ed adres\u00e1\u0159\u016f s n\u00e1zvy odli\u0161n\u00fdmi od p\u016fvodn\u011b po\u017eadovan\u00fdch. Probl\u00e9m byl vy\u0159e\u0161en z\u00e1kazem pou\u017e\u00edv\u00e1n\u00ed volby &#171;-r&#187; s ji\u017e existuj\u00edc\u00edm c\u00edlov\u00fdm adres\u00e1\u0159em.\n<li class=\"l\"> Zranitelnost (CVE-2026-35385) v utilit\u011b scp, kv\u016fli kter\u00e9 po nahr\u00e1n\u00ed souboru s opr\u00e1vn\u011bn\u00edmi root s volbou &#171;-O&#187; a bez volby &#171;-p&#187; nebyly vy\u010di\u0161t\u011bny flagy setuid\/setgid.\n<li class=\"l\"> Mo\u017enost obch\u00e1zen\u00ed vykon\u00e1v\u00e1n\u00ed p\u0159\u00edkazu &#171;forced_command&#187; v nastaven\u00edch authorized_keys p\u0159i p\u0159ipojen\u00ed autentizovan\u00e9ho u\u017eivatele s pou\u017eit\u00edm volby &#171;-t&#187; (p\u0159ihl\u00e1\u0161en\u00ed s ov\u011b\u0159en\u00edm hesla a otev\u0159en\u00e9ho kl\u00ed\u010de).\n<li class=\"l\"> Odm\u00edtnut\u00ed slu\u017eby prost\u0159ednictv\u00edm vytvo\u0159en\u00ed speci\u00e1ln\u00edho souboru s n\u00e1zvem authorized_keys, blokuj\u00edc\u00edho operace \u010dten\u00ed, m\u00edstn\u00edm u\u017eivatelem.\n<li class=\"l\"> \u010cten\u00ed dat z oblasti mimo vyrovn\u00e1vac\u00ed pam\u011b\u0165 p\u0159i vytv\u00e1\u0159en\u00ed zpracovatel\u016f p\u0159esm\u011brov\u00e1n\u00ed klientsk\u00fdch a serverov\u00fdch po\u017eadavk\u016f, co\u017e m\u016f\u017ee v\u00e9st k uzav\u0159en\u00ed libovoln\u00fdch souborov\u00fdch deskriptor\u016f.    <\/ul>\n<p>Zm\u011bny nesouvisej\u00edc\u00ed se zabezpe\u010den\u00edm:  <\/p>\n<ul>\n<li class=\"l\"> Do ssh byla p\u0159id\u00e1na volba &#171;-R&#187; pro p\u0159esm\u011brov\u00e1n\u00ed unixov\u00fdch soket\u016f p\u0159es SSH tunel.\n<li class=\"l\"> Do ssd byla p\u0159id\u00e1na volba &#171;-M&#187; pro omezen\u00ed maxim\u00e1ln\u00ed doby trv\u00e1n\u00ed relace.\n<li class=\"l\"> Do &#171;authorized_keys&#187; byla p\u0159id\u00e1na volba &#171;permitlisten&#187; pro omezen\u00ed povolen\u00fdch port\u016f.\n<li class=\"l\"> Podpora pro RSA kl\u00ed\u010de vytvo\u0159en\u00e9 v dropbearkey 0.32 nebo star\u0161\u00edch verz\u00edch t\u00e9to utility byla ukon\u010dena, proto\u017ee byly zraniteln\u00e9 v\u016f\u010di \u00fatok\u016fm prost\u0159ednictv\u00edm bo\u010dn\u00edho kan\u00e1lu, kter\u00e9 hodnotily rozd\u00edl v \u010dase zpracov\u00e1n\u00ed dat, kter\u00e1 byla a nebyla ulo\u017eena do mezipam\u011bti.\n<li class=\"l\"> Pro zablokov\u00e1n\u00ed prolomen\u00ed otev\u0159en\u00fdch kl\u00ed\u010d\u016f na hostitel\u00edch je po\u010det pokus\u016f o otev\u0159en\u00e9 kl\u00ed\u010de omezen na 15 pokus\u016f na ka\u017edou relaci.        <\/ul>\n<p>Zdroj: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65356\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Dropbear 2026.90, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442 SSH, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 OpenWrt. Dropbear \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0438\u0437\u043a\u0438\u043c \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 busybox. \u041f\u0440\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u043d\u0438\u0438 \u0441 uClibc \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b Dropbear \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170353","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Dropbear 2026.90, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442 SSH, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 OpenWrt.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Dropbear SSH 2026.90 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Dropbear 2026.90, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442 SSH, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 OpenWrt.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-04T10:24:42+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-04T10:24:42+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed Dropbear SSH 2026.90 s odstran\u011bn\u00edm zranitelnost\u00ed | ProHoster","description":"Bylo vyd\u00e1no vyd\u00e1n\u00ed projektu Dropbear 2026.90, kter\u00e9 zahrnuje SSH server a klienta, je\u017e se roz\u0161\u00ed\u0159ily v bezdr\u00e1tov\u00fdch sm\u011brova\u010d\u00edch a kompaktn\u00edch distribuc\u00edch, jako je OpenWrt.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Dropbear SSH 2026.90 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Dropbear 2026.90, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442 SSH, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 OpenWrt.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-04T10:24:42+00:00","article:modified_time":"2026-05-04T10:24:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/170353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=170353"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/170353\/revisions"}],"predecessor-version":[{"id":173160,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/170353\/revisions\/173160"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=170353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=170353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=170353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}