{"id":167221,"date":"2026-04-02T23:11:54","date_gmt":"2026-04-02T21:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-10-3"},"modified":"2026-04-04T11:22:40","modified_gmt":"2026-04-04T09:22:40","slug":"reliz-openssh-10-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-10-3","title":{"rendered":"OpenSSH 10.3 v\u00e4ljalaskmine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u00e4rast poole aasta arendust on ilmunud versioon OpenSSH 10.3, avatud rakenduse klient ja <a href=\"https:\/\/prohoster.info\/et\/server\/\">serverilt<\/a> t\u00f6\u00f6tamiseks protokollide SSH 2.0 ja SFTP. Peamised muudatused:<\/p>\n<ul>\n<li class=\"l\">Kaitsetu pehmenduse, mis v\u00f5imaldab r\u00fcndajal, kes kontrollib kasutajanime, mis edastatakse ssh-utili k\u00e4ivitamisel, potentsiaalselt teostada juhuslikke shell-k\u00e4ske. Haavatavus avaldub s\u00fcsteemides, mis kasutavad asendust &#171;%u&#187; m\u00f5nedes konfiguratsioonifaili juhistes, nagu &#171;Match exec&#187;. Probleem tuleneb erim\u00e4rkide kontrollimisest kasutajanimes p\u00e4rast %-asenduste sooritamist ssh_config konfiguratsioonifailis.<\/li>\n<li class=\"l\">Kaitseprobleem sshd-s, mis on p\u00f5hjustatud v\u00e4\u00e4rast authorized_keys principals=&#187;&#187; valiku sidumisest sertifikaadi nimede (principal) loendiga, olukorras, kus nimedes on m\u00e4rgitud s\u00fcmbol &#171;,&#187;. Haavatavuse kasutamiseks on vajalik, et authorized_keys principals=&#187;&#187; valikus oleks mitu nime ja et tunnustusasutus oleks v\u00e4ljastanud mitme nimega sertifikaadi, mis on eraldatud komadega (tavaliselt ei lubata seda). Muudetud k\u00e4itumist t\u00fchja nimega sertifikaatide osas \u2014 varem kattus t\u00fchi nimi k\u00f5ikide authorized_keys principals=&#187;&#187; valikutega, n\u00fc\u00fcd ei kata.<\/li>\n<li class=\"l\">Scp-s on lahendatud probleem, mille t\u00f5ttu p\u00e4rast root \u00f5igustega faili \u00fcleslaadimist, kasutades valikut &#171;-O&#187; ja ilma valikuta &#171;-p&#187;, ei eemaldatud setuid\/setgid lippe.<\/li>\n<li class=\"l\">Sshd-s on parandatud ECDSA v\u00f5tmete t\u00f6\u00f6tlemise probleem PubkeyAcceptedAlgorithms ja HostbasedAcceptedAlgorithms juhistes, mille t\u00f5ttu, kui oli m\u00e4\u00e4ratud \u00fcksk\u00f5ik milline ECDSA algoritm (n\u00e4iteks &#171;ecdsa-sha2-nistp384&#187;), hakati aktsepteerima ka k\u00f5iki teisi ECDSA aluseks olevaid algoritme, isegi kui need ei olnud n\u00f5uetekohaselt lubatud nimekirjas.<\/li>\n<li class=\"l\">Ssh-s ja sshd-s on SSH-agentidega suhtlemisel lisatud IANA m\u00e4\u00e4ratletud identifikaatorite (codepoint) tugi draft-ietf-sshm-ssh-agent spetsifikatsioonis. Varasemalt kasutatud identifikaatorite nagu &#171;@openssh.com&#187; tugi on s\u00e4ilinud.<\/li>\n<li class=\"l\">Ssh-agentis on ellu viidud &#171;query&#187; laiendus, mis on m\u00e4\u00e4ratletud draft-ietf-sshm-ssh-agent spetsifikatsioonis ning mis v\u00f5imaldab m\u00e4\u00e4rata agendi toetatavaid funktsioone. Toetuste nimekirja saamiseks on ssh-add utiliiti lisatud &#171;-Q&#187; valik.<\/li>\n<li class=\"l\">sshd_config-s on lubatud mitu faili m\u00e4\u00e4rata RevokedKeys juhises, ssh_config-s aga RevokedHostKeys juhises.<\/li>\n<li class=\"l\">Ssh-ides on lisatud escape-k\u00e4sk \u201e~I\u201d ja valik \u201e-O conninfo\u201d aktiivse \u00fchenduse teabe n\u00e4itamiseks ning valik \u201e-O channels\u201d avatud kanalite teabe n\u00e4itamiseks.<\/li>\n<li class=\"l\">Sshd-s on direktiivis PerSourcePenalties rakendatud valik 'invaliduser', et lisada viivitus, kui \u00fcritatakse sisse logida mitteeksisteeriva kasutajana (vaikimisi 5 sekundit). Lisatud on v\u00f5imalus m\u00e4\u00e4rata mitte-t\u00e4isarvulisi viivitusaegu.<\/li>\n<li class=\"l\">SSHD-s on lisatud valik GSSAPIDelegateCredentials, et hallata kliendi poolt esitatud delegeeritud akrediteerimiste vastuv\u00f5ttu.<\/li>\n<li class=\"l\">SSH-keygenis on toetatud ED25519 v\u00f5tmete salvestamist PKCS8 formaadis.<\/li>\n<li class=\"l\">Toetatakse digitaalsete allkirjade skeemi ed25519, mis on ellu viidud l\u00e4bi libcrypto.<\/li>\n<\/ul>\n<p>Allikas: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65126\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f: \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b ssh, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 shell-\u043a\u043e\u043c\u0430\u043d\u0434. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 &#171;%u&#187; \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0430\u0445 \u0444\u0430\u0439\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a &#171;Match exec&#187;. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-167221","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-10-3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 10.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-10-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-02T21:11:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-04T09:22:40+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 10.3 v\u00e4ljaanne | ProHoster","description":"P\u00e4rast kuue kuu arendust on v\u00e4lja antud OpenSSH 10.3, avatud teostus SSH 2.0 ja SFTP protokollidega t\u00f6\u00f6tamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-10-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 10.3 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-10-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-02T21:11:54+00:00","article:modified_time":"2026-04-04T09:22:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/167221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=167221"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/167221\/revisions"}],"predecessor-version":[{"id":167487,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/167221\/revisions\/167487"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=167221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=167221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=167221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}