{"id":38754,"date":"2019-10-31T22:25:45","date_gmt":"2019-10-31T19:25:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/reliz-openssh-8-1\/"},"modified":"2019-10-31T22:25:45","modified_gmt":"2019-10-31T19:25:45","slug":"reliz-openssh-8-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-openssh-8-1","title":{"rendered":"Az OpenSSH 8.1 kiad\u00e1sa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Hat h\u00f3napnyi fejleszt\u00e9s ut\u00e1n <noindex><a rel=\"nofollow\" href=\"http:\/\/lists.mindrot.org\/pipermail\/openssh-unix-dev\/2019-October\/037966.html\">bemutatva<\/a><\/noindex> kiad\u00e1s <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openssh.com\/\">OpenSSH 8.1<\/a><\/noindex>, ny\u00edlt forr\u00e1s\u00fa \u00fcgyf\u00e9l- \u00e9s szervermegold\u00e1s az SSH 2.0 \u00e9s SFTP protokollok haszn\u00e1lat\u00e1hoz. <\/p>\n<p>Az \u00faj kiad\u00e1sban kiemelt figyelmet \u00e9rdemel az SSH-t, SSHD-t, SSH-Add-t \u00e9s SSH-Keygen-t \u00e9rint\u0151 sebezhet\u0151s\u00e9g megsz\u00fcntet\u00e9se. A probl\u00e9ma az XMSS t\u00edpus\u00fa z\u00e1rt kulcsok elemz\u00e9si k\u00f3dj\u00e1ban tal\u00e1lhat\u00f3, \u00e9s lehet\u0151v\u00e9 teszi a t\u00e1mad\u00f3 sz\u00e1m\u00e1ra a sz\u00e1m\u00e9rt\u00e9k t\u00falcsordul\u00e1s\u00e1nak kezdem\u00e9nyez\u00e9s\u00e9t. A sebezhet\u0151s\u00e9g kihaszn\u00e1lhat\u00f3, de kev\u00e9sb\u00e9 alkalmazhat\u00f3, mivel az XMSS kulcsok t\u00e1mogat\u00e1sa k\u00eds\u00e9rleti lehet\u0151s\u00e9g, amely alap\u00e9rtelmez\u00e9s szerint le van tiltva (a hordozhat\u00f3 verzi\u00f3ja az autoconf alatt m\u00e9g a XMSS enged\u00e9lyez\u00e9s\u00e9re sem k\u00edn\u00e1l build opci\u00f3t).<\/p>\n<p>F\u0151bb v\u00e1ltoz\u00e1sok: <\/p>\n<ul>\n<li class=\"l\"> az SSH-ban, SSHD-ben \u00e9s SSH-\u00fcgyn\u00f6kben <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50929\">hozz\u00e1adva<\/a><\/noindex> a k\u00f3d, amely megakad\u00e1lyozza a mem\u00f3ri\u00e1ban l\u00e9v\u0151 priv\u00e1t kulcs helyre\u00e1ll\u00edt\u00e1s\u00e1t olyan oldals\u00f3 csatorn\u00e1kon v\u00e9gzett t\u00e1mad\u00e1sok sor\u00e1n, mint p\u00e9ld\u00e1ul <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47856\">Spectre, Meltdown<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=41340\">RowHammer<\/a><\/noindex> \u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/rambleed.com\/\">RAMBleed<\/a><\/noindex>. A priv\u00e1t kulcsok most m\u00e1r titkos\u00edtva vannak bet\u00f6ltve a mem\u00f3ri\u00e1ba, \u00e9s csak haszn\u00e1latuk sor\u00e1n ker\u00fclnek dek\u00f3dol\u00e1sra, egy\u00e9bk\u00e9nt titkos\u00edtva maradnak. E megk\u00f6zel\u00edt\u00e9s mellett a sikeres z\u00e1rtkulcs-helyre\u00e1ll\u00edt\u00e1shoz a t\u00e1mad\u00f3nak el\u0151sz\u00f6r is vissza kell \u00e1ll\u00edtania egy 16 KB m\u00e9ret\u0171, v\u00e9letlenszer\u0171en gener\u00e1lt k\u00f6ztes kulcsot, amely a f\u0151 kulcs titkos\u00edt\u00e1s\u00e1hoz haszn\u00e1latos, ami a modern t\u00e1mad\u00e1sok jellemz\u0151 hibaar\u00e1ny\u00e1val val\u00f3sz\u00edn\u0171tlen;\n<li class=\"l\"> A  <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/ssh-keygen.1\">ssh-keygen<\/a><\/noindex>  k\u00eds\u00e9rleti t\u00e1mogat\u00e1s ker\u00fclt bevezet\u00e9sre egy egyszer\u0171s\u00edtett digit\u00e1lis al\u00e1\u00edr\u00e1sok l\u00e9trehoz\u00e1s\u00e1nak \u00e9s ellen\u0151rz\u00e9s\u00e9nek s\u00e9ma t\u00e1mogat\u00e1s\u00e1ra. Digit\u00e1lis al\u00e1\u00edr\u00e1sok hozhat\u00f3k l\u00e9tre a norm\u00e1l SSH-kulcsok seg\u00edts\u00e9g\u00e9vel, amelyeket lemezen vagy az SSH-\u00fcgyn\u00f6kben t\u00e1rolnak, \u00e9s ellen\u0151rizhet\u0151k az authorized_keys-hez hasonl\u00f3 felhaszn\u00e1l\u00e1si m\u00f3dszerrel <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/ssh-keygen.1#ALLOWED_SIGNERS\">a megengedett kulcsok list\u00e1j\u00e1b\u00f3l<\/a><\/noindex>. A digit\u00e1lis al\u00e1\u00edr\u00e1sba be\u00e1gyazott inform\u00e1ci\u00f3t a n\u00e9vt\u00e9r haszn\u00e1lat\u00e1val biztos\u00edtj\u00e1k a k\u00fcl\u00f6nb\u00f6z\u0151 ter\u00fcleteken val\u00f3 felhaszn\u00e1l\u00e1s sor\u00e1n fell\u00e9p\u0151 z\u0171rzavar elker\u00fcl\u00e9se \u00e9rdek\u00e9ben (p\u00e9ld\u00e1ul e-mail \u00e9s f\u00e1jlok eset\u00e9n);\n<li class=\"l\"> Az ssh-keygen alap\u00e9rtelmez\u00e9s szerint az rsa-sha2-512 algoritmus haszn\u00e1lat\u00e1ra van be\u00e1ll\u00edtva az RSA kulcs alap\u00fa digit\u00e1lis al\u00e1\u00edr\u00e1ssal t\u00f6rt\u00e9n\u0151 tan\u00fas\u00edtv\u00e1nyok al\u00e1\u00edr\u00e1s\u00e1hoz (CA \u00fczemm\u00f3dban). Az ilyen tan\u00fas\u00edtv\u00e1nyok nem kompatibilisek az OpenSSH 7.2 el\u0151tti kiad\u00e1sokkal (a kompatibilit\u00e1s biztos\u00edt\u00e1sa \u00e9rdek\u00e9ben az algoritmus t\u00edpus\u00e1t \u00e1t kell defini\u00e1lni, p\u00e9ld\u00e1ul a 'ssh-keygen -t ssh-rsa -s ...' parancs haszn\u00e1lat\u00e1val);\n<li class=\"l\"> Az ssh ProxyCommand kifejez\u00e9s\u00e9ben megval\u00f3s\u00edt\u00e1sra ker\u00fclt a '%n' (az adreszos sorban megadott hosztn\u00e9v) kiterjeszt\u00e9s t\u00e1mogat\u00e1sa;\n<li class=\"l\"> Az ssh \u00e9s sshd titkos\u00edt\u00e1si algoritmusok list\u00e1iban mostant\u00f3l a javasolt alap\u00e9rtelmezett algoritmusok behelyettes\u00edt\u00e9s\u00e9hez az '^' jel is haszn\u00e1lhat\u00f3. P\u00e9ld\u00e1ul az ssh-ed25519 alap\u00e9rtelmezett list\u00e1hoz val\u00f3 hozz\u00e1ad\u00e1s\u00e1hoz a k\u00f6vetkez\u0151t adhatjuk meg: 'HostKeyAlgorithms ^ssh-ed25519';\n<li class=\"l\"> Az ssh-keygen biztos\u00edtja a kulcshoz csatolt megjegyz\u00e9s kimenet\u00e9t a nyilv\u00e1nos kulcs z\u00e1rolt kulcsb\u00f3l val\u00f3 kinyer\u00e9sekor;\n<li class=\"l\"> Az ssh-keygen-h\u00f6z hozz\u00e1 lett adva a '-v' z\u00e1szl\u00f3 haszn\u00e1lat\u00e1nak lehet\u0151s\u00e9ge kulcsok keres\u00e9si m\u0171veletekn\u00e9l (p\u00e9ld\u00e1ul: 'ssh-keygen -vF host'), amelynek megad\u00e1sa a hoszt vizu\u00e1lis al\u00e1\u00edr\u00e1s\u00e1nak megjelen\u00edt\u00e9s\u00e9hez vezet;\n<li class=\"l\"> Hozz\u00e1adva a <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/PKCS_8\">PKCS8<\/a><\/noindex> mint alternat\u00edv form\u00e1tum a titkos kulcsok t\u00e1rol\u00e1s\u00e1ra lemezen. Alap\u00e9rtelmez\u00e9s szerint a PEM form\u00e1tumot haszn\u00e1lja, a PKCS8 pedig hasznos lehet a harmadik f\u00e9l alkalmaz\u00e1sokkal val\u00f3 kompatibilit\u00e1s el\u00e9r\u00e9s\u00e9hez.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Forr\u00e1s: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51640\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.1, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ssh, sshd, ssh-add \u0438 ssh-keygen. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043a\u043e\u0434\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0441 \u0442\u0438\u043f\u043e\u043c XMSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38754","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-openssh-8-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-openssh-8-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:25:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:25:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 8.1 kiad\u00e1s | ProHoster","description":"Hat h\u00f3napos fejleszt\u00e9s ut\u00e1n bemutat\u00e1sra ker\u00fclt az \u00faj verzi\u00f3","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-openssh-8-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.1 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/reliz-openssh-8-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:45+00:00","article:modified_time":"2019-10-31T19:25:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38754","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:17:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:04:29","updated":"2026-01-23 23:17:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=38754"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38754\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=38754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=38754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=38754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}