{"id":38754,"date":"2019-10-31T22:25:45","date_gmt":"2019-10-31T19:25:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/reliz-openssh-8-1\/"},"modified":"2019-10-31T22:25:45","modified_gmt":"2019-10-31T19:25:45","slug":"reliz-openssh-8-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-8-1","title":{"rendered":"OpenSSH 8.1 v\u00e4ljalase","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u00e4rast kuue kuu arendust\u00f6\u00f6d <noindex><a rel=\"nofollow\" href=\"http:\/\/lists.mindrot.org\/pipermail\/openssh-unix-dev\/2019-October\/037966.html\">esitati<\/a><\/noindex> vabastus <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openssh.com\/\">OpenSSH 8.1<\/a><\/noindex>, avatud kliendi ja serveri teostus SSH 2.0 ja SFTP protokollide jaoks. <\/p>\n<p>Uues v\u00e4ljaandes v\u00e4\u00e4rib eraldi t\u00e4helepanu haavatavuse k\u00f5rvaldamine, mis m\u00f5jutab ssh, sshd, ssh-add ja ssh-keygen. Probleem esineb XMSS-t\u00fc\u00fcpi privaatsete v\u00f5tmete parsimise koodis ja v\u00f5imaldab r\u00fcndajal algatada t\u00e4isarvu \u00fclevoolu. Haavatavus on m\u00e4rgitud kui ekspluateeritav, kuid v\u00e4hekasutatav, kuna XMSS-v\u00f5tmete tugi kuulub eksperimentaalsete v\u00f5imaluste alla, mis on vaikimisi v\u00e4lja l\u00fclitatud (\u00fclekantavas versioonis autoconf pole isegi ehitusv\u00f5imalust XMSS-i sissel\u00fclitamiseks).<\/p>\n<p>Peamised muudatused: <\/p>\n<ul>\n<li class=\"l\"> ssh, sshd ja ssh-agent <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50929\">on lisatud<\/a><\/noindex> kood, mis takistab privaatse v\u00f5tme taastamist, mis asub m\u00e4lus, v\u00e4liste kanalite r\u00fcnnakute kaudu, nagu <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47856\">Spectre, Meltdown<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=41340\">RowHammer<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/rambleed.com\/\">RAMBleed<\/a><\/noindex>. Privaatv\u00f5tmed kr\u00fcpteeritakse n\u00fc\u00fcd m\u00e4lu laadimise ajal ja dekr\u00fcpteeritakse ainult kasutamise hetkedel, olles enamus ajast kr\u00fcpteeritud. Sellise l\u00e4henemise korral peab r\u00fcndajal olema v\u00f5imalik eelnevalt taastada juhuslikult genereeritud vahev\u00f5ti suurusega 16 KB, mis on vajalik peamise v\u00f5tme kr\u00fcpteerimiseks, mis on t\u00e4nap\u00e4evaste r\u00fcnnakute prognoositava taastamise veam\u00e4\u00e4ra juures ebat\u00f5en\u00e4oline;\n<li class=\"l\"> Uues  <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/ssh-keygen.1\">ssh-keygen<\/a><\/noindex>  lisatud eksperimenteeriv toetus lihtsustatud digitaalsete allkirjade loomise ja kontrollimise skeemile. Digitaalseid allkirju saab luua tavaliste SSH-v\u00f5tmete abil, mis on salvestatud kettale v\u00f5i ssh-agenti, ja neid saab kontrollida, kasutades sarnast nagu authorized_keys <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/ssh-keygen.1#ALLOWED_SIGNERS\">lubatud v\u00f5tmete loendit.<\/a><\/noindex>Digitaalsesse allkirja on sisse ehitatud teave nimede ruumi kohta, et v\u00e4ltida segadust erinevates valdkondades (n\u00e4iteks e-kirjade ja failide korral);\n<li class=\"l\"> ssh-keygen on vaikimisi seadistatud kasutama algoritmi rsa-sha2-512 RSA v\u00f5tme alusel digitaalsete allkirjade sertifitseerimiseks (CA re\u017eiimis t\u00f6\u00f6tades). Sellised sertifikaadid pole \u00fchilduvad versioonidega enne OpenSSH 7.2 (\u00fchilduvuse tagamiseks tuleks \u00fcle defineerida algoritmi t\u00fc\u00fcp, n\u00e4iteks k\u00e4ivitades &#171;ssh-keygen -t ssh-rsa -s &#8230;&#187;);\n<li class=\"l\"> ssh-s v\u00e4ljendites ProxyCommand on loodud tugi asenduse &#171;%n&#187; (aadressi ribal esitletud hosti nimi) avamiseks;\n<li class=\"l\"> ssh ja sshd kr\u00fcpteerimisalgoritmide loendites saab n\u00fc\u00fcd soovitatud vaikimisi algoritmide lisamiseks kasutada s\u00fcmbolit &#171;^&#187;. N\u00e4iteks ssh-ed25519 lisamiseks vaikimisi loendisse saab m\u00e4rkida &#171;HostKeyAlgorithms ^ssh-ed25519&#187;;\n<li class=\"l\"> SSH-keygenis on tagatud v\u00f5tme kommentaari kuvamine, kui avalikku v\u00f5tit privaatv\u00f5tme kaudu v\u00e4lja t\u00f5mmatakse;\n<li class=\"l\"> ssh-keygen-s on lisatud v\u00f5imalus kasutada lippu &#171;-v&#187; v\u00f5tiotsingu operatsioonide t\u00e4itmisel (n\u00e4iteks &#171;ssh-keygen -vF host&#187;), mille m\u00e4\u00e4ramine toob kaasa hosti visuaalse allkirja v\u00e4ljundi;\n<li class=\"l\"> Lisatud on v\u00f5imalus kasutada <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/PKCS_8\">PKCS8<\/a><\/noindex> alternatiivse formaadina privaatv\u00f5tmete salvestamiseks kettale. Vaikimisi kasutatakse endiselt PEM formaati, kuid PKCS8 v\u00f5ib osutuda kasulikuks kolmandate osapoolte rakendustega \u00fchilduvuse tagamiseks.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51640\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.1, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ssh, sshd, ssh-add \u0438 ssh-keygen. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043a\u043e\u0434\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0441 \u0442\u0438\u043f\u043e\u043c XMSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38754","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-8-1\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-8-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:25:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:25:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 8.1 versioon | ProHoster","description":"Kuue kuu arenduse j\u00e4rel on v\u00e4lja antud versioon","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-8-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.1 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/reliz-openssh-8-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:45+00:00","article:modified_time":"2019-10-31T19:25:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38754","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:17:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:04:29","updated":"2026-01-23 23:17:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38754"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38754\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}