{"id":99317,"date":"2021-03-03T10:22:34","date_gmt":"2021-03-03T08:22:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-8-5"},"modified":"2021-03-03T10:22:34","modified_gmt":"2021-03-03T08:22:34","slug":"reliz-openssh-8-5","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-5","title":{"rendered":"Vyd\u00e1n\u00ed OpenSSH 8.5","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po p\u011bti m\u011bs\u00edc\u00edch v\u00fdvoje byl p\u0159edstaven release OpenSSH 8.5, otev\u0159en\u00e9 implementace klienta a serveru pro pr\u00e1ci s protokoly SSH 2.0 a SFTP.    <\/p>\n<p>V\u00fdvoj\u00e1\u0159i OpenSSH upozornili na bl\u00ed\u017e\u00edc\u00ed se p\u0159e\u0159azen\u00ed algoritm\u016f pou\u017e\u00edvaj\u00edc\u00edch SHA-1 hash do kategorie zastaral\u00fdch, v souvislosti se zvy\u0161uj\u00edc\u00ed se efektivitou kolizn\u00edch \u00fatok\u016f s dan\u00fdm prefixem (n\u00e1klady na nalezen\u00ed kolize se odhaduj\u00ed na p\u0159ibli\u017en\u011b 50 tis\u00edc dolar\u016f). V jednom z nejbli\u017e\u0161\u00edch vyd\u00e1n\u00ed pl\u00e1nuj\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed odpojit mo\u017enost pou\u017e\u00edv\u00e1n\u00ed algoritmu digit\u00e1ln\u00edho podpisu pomoc\u00ed ve\u0159ejn\u00e9ho kl\u00ed\u010de \u201essh-rsa\u201c, kter\u00fd je uveden v p\u016fvodn\u00edm RFC pro protokol SSH a nad\u00e1le je \u0161iroce roz\u0161\u00ed\u0159en v praxi.    <\/p>\n<p>Pro ov\u011b\u0159en\u00ed pou\u017eit\u00ed ssh-rsa ve va\u0161ich syst\u00e9mech m\u016f\u017eete zkusit p\u0159ipojen\u00ed p\u0159es ssh s volbou &#171;-oHostKeyAlgorithms=-ssh-rsa&#187;. To v\u0161ak automatick\u00e9 zru\u0161en\u00ed digit\u00e1ln\u00edch podpis\u016f &#171;ssh-rsa&#187; ve v\u00fdchoz\u00edm nastaven\u00ed neznamen\u00e1 \u00fapln\u00fd vzd\u00e1n\u00ed se pou\u017e\u00edv\u00e1n\u00ed RSA kl\u00ed\u010d\u016f, proto\u017ee vedle SHA-1 protokol SSH umo\u017e\u0148uje pou\u017eit\u00ed dal\u0161\u00edch algoritm\u016f pro v\u00fdpo\u010det hash\u016f. Konkr\u00e9tn\u011b, vedle &#171;ssh-rsa&#187; z\u016fstane mo\u017enost pou\u017eit\u00ed p\u00e1r\u016f &#171;rsa-sha2-256&#187; (RSA\/SHA256) a &#171;rsa-sha2-512&#187; (RSA\/SHA512).    <\/p>\n<p>Aby se usnadnil p\u0159echod na nov\u00e9 algoritmy, je ve verzi OpenSSH 8.5 ve v\u00fdchoz\u00edm nastaven\u00ed aktivov\u00e1na volba UpdateHostKeys, kter\u00e1 umo\u017e\u0148uje automaticky p\u0159esm\u011brovat klienty na spolehliv\u011bj\u0161\u00ed algoritmy. Pomoc\u00ed t\u00e9to volby se aktivuje speci\u00e1ln\u00ed roz\u0161\u00ed\u0159en\u00ed protokolu \u201ehostkeys@openssh.com\u201c, kter\u00e9 umo\u017e\u0148uje serveru po \u00fasp\u011b\u0161n\u00e9 autentizaci informovat klienta o v\u0161ech dostupn\u00fdch kl\u00ed\u010d\u00edch hostitele. Klient m\u016f\u017ee tyto kl\u00ed\u010de odrazit ve sv\u00e9m souboru ~\/.ssh\/known_hosts, co\u017e umo\u017e\u0148uje organizovat aktualizaci kl\u00ed\u010d\u016f hostitele a usnad\u0148uje zm\u011bnu kl\u00ed\u010d\u016f na <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-dronten\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2618\">serveru<\/a>.     <\/p>\n<p>Pou\u017eit\u00ed UpdateHostKeys je omezeno n\u011bkolika v\u00fdhradami, kter\u00e9 mohou b\u00fdt v budoucnu zru\u0161eny: kl\u00ed\u010d mus\u00ed b\u00fdt uveden ve UserKnownHostsFile a nem\u011bl by b\u00fdt pou\u017e\u00edv\u00e1n v GlobalKnownHostsFile; kl\u00ed\u010d mus\u00ed b\u00fdt p\u0159\u00edtomen pouze pod jedn\u00edm jm\u00e9nem; nem\u011bl by b\u00fdt pou\u017eit certifik\u00e1t hostitelsk\u00e9ho kl\u00ed\u010de; v known_hosts by nem\u011bly b\u00fdt pou\u017eity masky podle n\u00e1zvu hostitele; mus\u00ed b\u00fdt zak\u00e1z\u00e1na volba VerifyHostKeyDNS; mus\u00ed b\u00fdt aktivn\u00ed parametr UserKnownHostsFile.     <\/p>\n<p>Mezi doporu\u010den\u00fdmi algoritmy pro migraci jsou zm\u00edn\u011bny rsa-sha2-256\/512 podle RFC8332 RSA SHA-2 (podporov\u00e1no od OpenSSH 7.2 a pou\u017e\u00edv\u00e1no jako v\u00fdchoz\u00ed), ssh-ed25519 (podporov\u00e1no od OpenSSH 6.5) a ecdsa-sha2-nistp256\/384\/521 podle RFC5656 ECDSA (podporov\u00e1no od OpenSSH 5.7).           <\/p>\n<p>Dal\u0161\u00ed zm\u011bny:  <\/p>\n<ul>\n<li class=\"l\"> Zm\u011bny souvisej\u00edc\u00ed s bezpe\u010dnost\u00ed:\n<ul>\n<li class=\"l\"> V ssh-agent byla odstran\u011bna zranitelnost zp\u016fsoben\u00e1 op\u011btovn\u00fdm uvoln\u011bn\u00edm ji\u017e uvoln\u011bn\u00e9 oblasti pam\u011bti (double-free). Probl\u00e9m se objevuje od vyd\u00e1n\u00ed OpenSSH 8.2 a potenci\u00e1ln\u011b m\u016f\u017ee b\u00fdt zneu\u017eit, pokud \u00fato\u010dn\u00edk m\u00e1 p\u0159\u00edstup k socketu ssh-agent na lok\u00e1ln\u00edm syst\u00e9mu. K zneu\u017eit\u00ed zt\u011b\u017euje fakt, \u017ee p\u0159\u00edstup k socketu maj\u00ed pouze root a p\u016fvodn\u00ed u\u017eivatel. Nejpravd\u011bpodobn\u011bj\u0161\u00edm sc\u00e9n\u00e1\u0159em \u00fatoku je p\u0159esm\u011brov\u00e1n\u00ed agenta na \u00fa\u010det, kter\u00fd je pod kontrolou \u00fato\u010dn\u00edka, nebo na hostitel, kde m\u00e1 \u00fato\u010dn\u00edk root p\u0159\u00edstup.\n<li class=\"l\"> V sshd byla p\u0159id\u00e1na ochrana proti p\u0159enosu velmi velk\u00fdch parametr\u016f s u\u017eivatelsk\u00fdm jm\u00e9nem do syst\u00e9mu PAM, co\u017e umo\u017e\u0148uje blokovat zranitelnosti ve syst\u00e9mov\u00fdch modulech PAM (Pluggable Authentication Module). Nap\u0159\u00edklad zm\u011bna zabra\u0148uje vyu\u017eit\u00ed sshd jako vektoru pro zneu\u017eit\u00ed ned\u00e1vno odhalen\u00e9 root zranitelnosti v Solaris (CVE-2020-14871).      <\/ul>\n<li class=\"l\"> Zm\u011bny, kter\u00e9 mohou potenci\u00e1ln\u011b naru\u0161it kompatibilitu:\n<ul>\n<li class=\"l\"> V ssh a sshd byla p\u0159epracov\u00e1na experiment\u00e1ln\u00ed metoda v\u00fdm\u011bny kl\u00ed\u010d\u016f odoln\u00e1 proti de\u0161ifrov\u00e1n\u00ed kvantov\u00fdmi po\u010d\u00edta\u010di. Kvantov\u00e9 po\u010d\u00edta\u010de v\u00fdrazn\u011b rychleji \u0159e\u0161\u00ed \u00falohu faktorizace p\u0159irozen\u00e9ho \u010d\u00edsla na prvo\u010dinitele, co\u017e je z\u00e1klad modern\u00edch asymetrick\u00fdch \u0161ifrovac\u00edch algoritm\u016f a je efektivn\u011b ne\u0159e\u0161iteln\u00e9 na klasick\u00fdch procesorech. Pou\u017eit\u00e1 metoda je zalo\u017eena na algoritmu NTRU Prime, vyvinut\u00e9m pro postkvantov\u00e9 kryptosyst\u00e9my, a metod\u011b v\u00fdm\u011bny kl\u00ed\u010d\u016f zalo\u017een\u00e9 na eliptick\u00fdch k\u0159ivk\u00e1ch X25519. M\u00edsto sntrup4591761x25519-sha512@tinyssh.org je nyn\u00ed metoda identifikov\u00e1na jako sntrup761x25519-sha512@openssh.com (algoritmus sntrup4591761 byl nahrazen sntrup761).\n<li class=\"l\"> V ssh a sshd byl zm\u011bn\u011bn po\u0159\u00e1dek oznamov\u00e1n\u00ed podporovan\u00fdch algoritm\u016f digit\u00e1ln\u00edho podepisov\u00e1n\u00ed. Prvn\u00edm je nyn\u00ed nab\u00edzen ED25519 m\u00edsto ECDSA.\n<li class=\"l\"> V ssh a sshd se nastaven\u00ed parametr\u016f kvality slu\u017eeb TOS\/DSCP pro interaktivn\u00ed relace nyn\u00ed prov\u00e1d\u00ed p\u0159ed vytvo\u0159en\u00edm TCP spojen\u00ed.\n<li class=\"l\"> V ssh a sshd byla ukon\u010dena podpora \u0161ifru rijndael-cbc@lysator.liu.se, kter\u00fd je shodn\u00fd s aes256-cbc a byl pou\u017e\u00edv\u00e1n p\u0159ed schv\u00e1len\u00edm RFC-4253.\n<li class=\"l\"> Standardn\u011b je deaktivov\u00e1n parametr CheckHostIP, jeho\u017e p\u0159\u00ednos je minim\u00e1ln\u00ed, ale pou\u017eit\u00ed v\u00fdrazn\u011b zt\u011b\u017euje rotaci kl\u00ed\u010d\u016f pro hostitele za z\u00e1t\u011b\u017eov\u00fdmi balancerami.      <\/ul>\n<li class=\"l\"> V sshd byly p\u0159id\u00e1ny nastaven\u00ed PerSourceMaxStartups a PerSourceNetBlockSize pro omezen\u00ed intenzity spou\u0161t\u011bn\u00ed zpracovatel\u016f v z\u00e1vislosti na adres\u00e1ch klient\u016f. Uveden\u00e9 parametry umo\u017e\u0148uj\u00ed jemn\u011bj\u0161\u00ed \u0159\u00edzen\u00ed omezen\u00ed spu\u0161t\u011bn\u00ed proces\u016f ve srovn\u00e1n\u00ed s obecn\u00fdm nastaven\u00edm MaxStartups.\n<li class=\"l\">  V ssh a sshd byla p\u0159id\u00e1na nov\u00e1 konfigurace LogVerbose, kter\u00e1 umo\u017e\u0148uje vynutit zv\u00fd\u0161en\u00ed \u00farovn\u011b debug informac\u00ed zapisovan\u00fdch do logu, s mo\u017enost\u00ed filtrace podle vzor\u016f, funkc\u00ed a soubor\u016f.\n<li class=\"l\"> V ssh p\u0159i p\u0159ijet\u00ed nov\u00e9ho hostitelsk\u00e9ho kl\u00ed\u010de je zaji\u0161t\u011bno zobrazen\u00ed v\u0161ech n\u00e1zv\u016f hostitel\u016f a <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/lir\/ipv4\/\"   title=\"IP adress\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"830\">IP adress<\/a>, kter\u00e9 jsou s kl\u00ed\u010dem spojeny.\n<li class=\"l\"> V ssh je povolena volba UserKnownHostsFile=none pro deaktivaci pou\u017eit\u00ed souboru known_hosts p\u0159i identifikaci hostitelsk\u00fdch kl\u00ed\u010d\u016f.\n<li class=\"l\"> V ssh_config pro ssh byla p\u0159id\u00e1na konfigurace KnownHostsCommand, kter\u00e1 umo\u017e\u0148uje z\u00edskat data known_hosts z v\u00fdstupu zadan\u00e9ho p\u0159\u00edkazu.\n<li class=\"l\"> V ssh_config pro ssh byla p\u0159id\u00e1na volba PermitRemoteOpen, kter\u00e1 umo\u017e\u0148uje omezit c\u00edlovou adresu p\u0159i pou\u017eit\u00ed volby RemoteForward se SOCKS.\n<li class=\"l\"> V ssh pro kl\u00ed\u010de FIDO je zaji\u0161t\u011bno opakovan\u00e9 dot\u00e1z\u00e1n\u00ed PIN p\u0159i selh\u00e1n\u00ed operace s digit\u00e1ln\u00edm podpisem kv\u016fli nespr\u00e1vn\u00e9mu PINu a absenci dotazu PIN pro u\u017eivatele (nap\u0159\u00edklad, kdy\u017e se nepoda\u0159ilo z\u00edskat spr\u00e1vn\u00e9 biometrick\u00e9 \u00fadaje a za\u0159\u00edzen\u00ed se vr\u00e1tilo k ru\u010dn\u00edmu zad\u00e1n\u00ed PINu).\n<li class=\"l\"> V sshd byl do mechanismu izolace proces\u016f zalo\u017een\u00e9ho na seccomp-bpf na platform\u011b Linux p\u0159id\u00e1n podporovan\u00fd syst\u00e9mov\u00fdch vol\u00e1n\u00ed nav\u00edc.\n<li class=\"l\"> Byla aktualizov\u00e1na utilita contrib\/ssh-copy-id.          <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54690\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.5, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSH \u043d\u0430\u043f\u043e\u043c\u043d\u0438\u043b\u0438 \u043e \u0433\u0440\u044f\u0434\u0443\u0449\u0435\u043c \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0435 \u0432 \u0440\u0430\u0437\u0440\u044f\u0434 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0445\u0435\u0448\u0438 SHA-1, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c (\u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 50 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432). \u0412 \u043e\u0434\u043d\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99317","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.5, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-5\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.5 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.5, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-5\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-03-03T08:22:34+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-03-03T08:22:34+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vyd\u00e1n\u00ed OpenSSH 8.5 | ProHoster","description":"Po p\u011bti m\u011bs\u00edc\u00edch v\u00fdvoje byl p\u0159edstaven release OpenSSH 8.5, otev\u0159en\u00e9 implementace klienta a serveru pro pr\u00e1ci s protokoly SSH 2.0 a SFTP.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-5","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.5 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.5, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-5","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-03T08:22:34+00:00","article:modified_time":"2021-03-03T08:22:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99317","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-03 08:32:44","updated":"2026-02-09 21:38:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99317","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=99317"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99317\/revisions"}],"predecessor-version":[{"id":159900,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/99317\/revisions\/159900"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=99317"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=99317"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=99317"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}