{"id":182500,"date":"2026-07-07T04:53:59","date_gmt":"2026-07-07T02:54:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-openssh-10-4"},"modified":"2026-07-07T04:53:59","modified_gmt":"2026-07-07T02:54:00","slug":"dostupen-openssh-10-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/dostupen-openssh-10-4","title":{"rendered":"OpenSSH 10.4 er tilg\u00e6ngelig","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Efter tre m\u00e5neders udvikling er version 10.4 af OpenSSH, en open source implementering af klient- og serverprogrammer til SSH 2.0 og SFTP protokoller, blevet offentliggjort. Vigtige \u00e6ndringer:  <\/p>\n<ul>\n<li class=\"l\"> Der er tilf\u00f8jet eksperimentel underst\u00f8ttelse af den kombinerede digital signatur skema &#171;mldsa44-ed25519&#187;, der kombinerer den postkvante algoritme ML-DSA 44 og algoritmen baseret p\u00e5 elliptiske kurver Ed25519. For at aktivere underst\u00f8ttelsen skal du tilf\u00f8je &#171;mldsa44-ed25519&#187; til direktiverne HostKeyAlgorithms og PubkeyAcceptedAlgorithms. Til n\u00f8glegenerering kan du bruge kommandoen &#171;ssh-keygen -t mldsa44-ed25519&#187;.\n<li class=\"l\"> I ssh og sshd er der implementeret et nyt m\u00f8nstre matcher system baseret p\u00e5 en nondeterministisk endelig automat, som ikke er udsat for problemet med eksponentiel kompleksitet, n\u00e5r der bruges masker med mange &#171;*&#187; tegn.\n<li class=\"l\"> Adf\u00e6rden af Linux-versioner af sshd med aktiveret systemopkald filtrering via seccomp er blevet \u00e6ndret. Tidligere f\u00f8rte en fejl ved aktivering af SECCOMP eller NO_NEW_PRIVS p\u00e5 Linux-systemer uden deres underst\u00f8ttelse til en logvarsling og fortsat drift uden isolation, mens det nu vil resultere i et nedbrud.\n<li class=\"l\"> Ved brug af indstillingen &#171;sshd -G&#187; i konfigurationsdumpen skrives direktiver nu med b\u00e5de store og sm\u00e5 bogstaver i stedet for kun sm\u00e5 bogstaver (dvs. &#171;PubkeyAuthentication&#187; i stedet for &#171;pubkeyauthentication&#187;).\n<li class=\"l\"> Adf\u00e6rden af ssh og sshd er blevet justeret i henhold til standard RFC 4253: sending af beskeder urelateret til n\u00f8gleudveksling under genudveksling af n\u00f8gler vil nu medf\u00f8re afslutning af forbindelsen. Tidligere kunne angribere udf\u00f8re en DoS-angreb ved uendeligt at sende tredjepartsmeddelelser under n\u00f8gleudvekslingen, hvilket blev bufferet i <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/da\/server\/dts-dronten\/\" title=\"serveren\" data-wpil-keyword-link=\"linked\">serveren<\/a> og brugte hukommelse.            <\/ul>\n<p>Flere sikkerhedsproblemer er blevet l\u00f8st:  <\/p>\n<ul>\n<li class=\"l\"> I ssh-v\u00e6rkt\u00f8jet er der eliminering af potentiel adgang til hukommelse efter frigivelse (use-after-free) ved adgang til ondsindet <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/da\/server\/dts-shicago\/\" title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a>. Problemet udnyttes ved \u00e6ndring af v\u00e6rtens n\u00f8gle under genudveksling af n\u00f8gler.\n<li class=\"l\"> En s\u00e5rbarhed i sftp tillader upload af filer til en anden mappe, n\u00e5r der forbindes til en ondsindet server ved hj\u00e6lp af kommandoen i formatet &#171;sftp host:&#047;path .&#187;.\n<li class=\"l\"> S\u00e5rbarhed i scp, der muligg\u00f8r kopiering af filer mellem to eksterne <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/da\/server\/dts-dusseldorf\/\" title=\"servere\" data-wpil-keyword-link=\"linked\">servere<\/a>, en af dem er under angriberen kontrol, organisere optagelse af filer i en overordnet mappe, der er placeret et niveau under m\u00e5lmappen.\n<li class=\"l\"> Et problem er blevet l\u00f8st i sshd, der opst\u00e5r, n\u00e5r den interne SFTP-server implementation (&#171;internal-sftp&#187;) er deaktiveret som standard. Problemet er relateret til afsk\u00e6ringen af lange sekvenser i kommandolinjen efter 9 argumenter, hvilket f\u00f8rer til, at efterf\u00f8lgende argumenter bliver afsk\u00e5ret. Dette kan potentielt medf\u00f8re, at sikkerhedsrelaterede indstillinger bliver afsk\u00e5ret.\n<li class=\"l\"> I sshd er der blevet rettet en fejl, hvor direktivet &#171;DisableForwarding=yes&#187; ikke deaktiverede muligheden for at oprette tunneler, som er tilladt af indstillingen &#171;PermitTunnel=yes&#187; (som ikke er aktiveret som standard).\n<li class=\"l\"> I sshd er der rettet et problem, der kan bruges til at initiere en denial-of-service under autentificeringsstadiet, n\u00e5r direktivet GSSAPIAuthentication er aktiveret (deaktiveret som standard). Problemet blokeres ikke af gr\u00e6nsen &#171;MaxAuthTries&#187;, men falder ind under begr\u00e6nsningen &#171;PerSourcePenalties&#187;.\n<li class=\"l\"> I sshd er der blevet rettet fejl, der bet\u00f8d, at der ikke altid blev tilf\u00f8jet en minimumsforsinkelse mellem autentifikationsfors\u00f8g.        <\/ul>\n<p>Kilde: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65854\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f: \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 &#171;mldsa44-ed25519&#187;, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0439 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c ML-DSA 44 \u0438 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0440\u0438\u0432\u044b\u0445 Ed25519. \u0414\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c &#171;mldsa44-ed25519&#187; \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b HostKeyAlgorithms \u0438 PubkeyAcceptedAlgorithms. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182500","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/dostupen-openssh-10-4\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d OpenSSH 10.4 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/dostupen-openssh-10-4\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-07T02:54:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-07T02:54:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 10.4 er tilg\u00e6ngelig | ProHoster","description":"Efter tre m\u00e5neders udvikling er OpenSSH 10.4 blevet udgivet, en \u00e5ben implementering af klient og server til arbejde med SSH 2.0 og SFTP protokoller.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/dostupen-openssh-10-4","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d OpenSSH 10.4 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/dostupen-openssh-10-4","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-07T02:54:00+00:00","article:modified_time":"2026-07-07T02:54:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182500","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:08","updated":"2026-08-05 12:22:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/182500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=182500"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/182500\/revisions"}],"predecessor-version":[{"id":182564,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/182500\/revisions\/182564"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=182500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=182500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=182500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}