{"id":144216,"date":"2025-10-06T17:11:54","date_gmt":"2025-10-06T15:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-10-1"},"modified":"2025-10-06T17:11:54","modified_gmt":"2025-10-06T15:11:54","slug":"reliz-openssh-10-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-1","title":{"rendered":"OpenSSH 10.1 izlaidums","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ir izn\u0101cis OpenSSH 10.1, atv\u0113rt\u0101s klienta un servera realiz\u0101cijas SSH 2.0 un SFTP protokolu darbam.       <\/p>\n<p>Galven\u0101s izmai\u0146as:      <\/p>\n<ul>\n<li class=\"l\"> Atrisin\u0101ta dro\u0161\u012bbas probl\u0113ma, kas \u013cauj uzbruc\u0113jam ievietot shell komandas, manipul\u0113jot ar speci\u0101lajiem simboliem lietot\u0101ja v\u0101rd\u0101 vai URI, kas var\u0113tu tikt izpild\u012btas, palai\u017eot komandu, kas nor\u0101d\u012bta, izmantojot opciju &#171;ProxyCommand&#187; un saturot aizvietojumu &#171;%u&#187;. Probl\u0113ma skar tikai sist\u0113mas, kas \u013cauj lietot\u0101ja v\u0101rdu vai URI ieg\u016bt no neuzticamiem avotiem, palai\u017eot ssh.\n<p>Lai nov\u0113rstu l\u012bdz\u012bgas uzbrukumu metodes, ir aizliegta kontrolsymbolu izmanto\u0161ana lietot\u0101ju v\u0101rdos, kas nor\u0101d\u012bti komandrind\u0101 vai aizvietoti iestat\u012bjumos, izmantojot %-sec\u012bbas. T\u0101pat ir aizliegta nulles simbolu (&#171;&#092;0&#187;) izmanto\u0161ana ssh:\/\/ URI. Iz\u0146\u0113mums ir izdar\u012bts tikai lietot\u0101ju v\u0101rdiem, kas nor\u0101d\u012bti konfigur\u0101cijas fail\u0101 (pie\u0146emot, ka \u0161is konfigur\u0101cijas fails ir uzticams).    <\/p>\n<li class=\"l\"> Komand\u0101s ssh un ssh-agent pievienota atbalsta funkcionalit\u0101te ed25519 atsl\u0113g\u0101m, kas uzglab\u0101tas PKCS#11 \u017eetonos.\n<li class=\"l\"> Konfigur\u0101cijas failam ssh_config pievienota opcija RefuseConnection, kuras apstr\u0101des laik\u0101 akt\u012bv\u0101s sada\u013cas veik\u0161anai tiek p\u0101rtraukts process ar k\u013c\u016bdas zi\u0146ojumu bez savienojuma izveides. Match host foo RefuseConnection &#171;host foo vairs netiek izmantots, l\u016bdzu, savienojieties ar hostu bar&#187;\n<li class=\"l\"> SSH un sshd pievienoti SIGINFO sign\u0101la apstr\u0101d\u0101t\u0101ji, lai re\u0123istr\u0113tu sesijas un akt\u012bv\u0101 kan\u0101la inform\u0101ciju.\n<li class=\"l\"> Ja lietot\u0101ja autentifik\u0101cijas piepras\u012bjums, pamatojoties uz sertifik\u0101tu, tiek noraid\u012bts, sshd nodro\u0161ina ne tikai iemesla re\u0123istr\u0113\u0161anu, bet ar\u012b izsme\u013co\u0161u inform\u0101ciju, lai identific\u0113tu problem\u0101tisko sertifik\u0101tu.\n<li class=\"l\"> SSHD pievienota X11 displeja numura p\u0101rbaude attiec\u012bb\u0101 uz novirzi, kas nor\u0101d\u012bta X11DisplayOffset direkt\u012bv\u0101.\n<li class=\"l\"> Vien\u012bbu testu kopai ir pievienota veiktsp\u0113jas m\u0113r\u012b\u0161anas funkcionalit\u0101te, ko var aktiviz\u0113t, palai\u017eot &#171;make UNITTEST_BENCHMARK=yes&#187; OpenBSD vai &#171;make unit-bench&#187; cit\u0101s sist\u0113m\u0101s.  <\/ul>\n<p>Izmai\u0146as, kas potenci\u0101li p\u0101rk\u0101pj atpaka\u013csader\u012bbu:  <\/p>\n<ul>\n<li class=\"l\"> K\u0101 ssh piesl\u0113g\u0161anas algoritmam, kas nav dro\u0161s pret kvantu datoru uzbrukumiem, pievienots br\u012bdin\u0101jums. Br\u012bdin\u0101jums pievienots sakar\u0101 ar n\u0101kotnes uzbrukumu risku, izmantojot iepriek\u0161 saglab\u0101tus datpl\u016bsmas dumus. Lai atsl\u0113gtu br\u012bdin\u0101jumu, ssh_config ir pievienota opcija WarnWeakCrypto. Match host unsafe.example.com WarnWeakCrypto no\n<li class=\"l\"> SSH un sshd parametrs kvalit\u0101tes apstr\u0101dei DSCP (IPQoS) ir b\u016btiski main\u012bts. Interakt\u012bvajai datpl\u016bsmai tagad p\u0113c noklus\u0113juma tiek pie\u0161\u0137irts EF (Expedited Forwarding) klase priorit\u0101tes apstr\u0101dei bezvadu t\u012bklos. Neinterakt\u012bvai datpl\u016bsmai tiek pie\u0161\u0137irta klase, kas p\u0113c noklus\u0113juma izmanto oper\u0113t\u0101jsist\u0113ma. Datpl\u016bsmas klasi var main\u012bt, izmantojot IPQoS iestat\u012bjumus ssh_config un sshd_config. ToS (service type) parametri IPv4 IPQoS direkt\u012bv\u0101 ir novecoju\u0161i (ToS ir nomain\u012bjis DSCP).\n<li class=\"l\"> ssh-add pievienojot sertifik\u0101tu ssh-agent, ir ieviesta sertifik\u0101ta dz\u012bves laika iestat\u012b\u0161ana v\u0113rt\u012bb\u0101, kas ir par 5 min\u016bt\u0113m ilg\u0101ka nek\u0101 sertifik\u0101ta der\u012bguma termi\u0146\u0161 (autom\u0101tiskai der\u012bguma termi\u0146\u0101 beigu sertifik\u0101ta dz\u0113\u0161anai). Lai atsp\u0113jotu \u0161o uzved\u012bbu, ssh-add ir pievienota opcija &#171;-N&#187;.\n<li class=\"l\"> Ir no\u0146emta XMSS atsl\u0113gu atbalsts, kas tika atz\u012bta par eksperiment\u0101lu un nekad netika iek\u013cauta p\u0113c noklus\u0113juma.\n<li class=\"l\"> Unix soketi, ko izveido ssh-agent un sshd procesi, ir p\u0101rvietoti no \/tmp katalogs uz ~\/.ssh\/agent, kas nodro\u0161ina, ka izol\u0113tiem procesiem, kuriem ir ierobe\u017eota piek\u013cuve failu sist\u0113mai, nav iesp\u0113jams piek\u013c\u016bt caur \u0161iem soketiem, tom\u0113r ir atv\u0113rta piek\u013cuve uz \/tmp.            <\/ul>\n<p>N\u0101kamajos izdevumos tiks pazi\u0146ots par DNS ierakstu SHA1 SSHFP noveco\u0161anu, \u0146emot v\u0113r\u0101 SHA1 hash funkcijas uzticam\u012bbas probl\u0113mas. \u0160ie ieraksti tiks ignor\u0113ti, un komanda &#171;ssh-keygen -r&#187; \u0123ener\u0113s tikai ierakstus SHA256 SSHFP.<br \/>\n<br \/>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=64007\">opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 10.1, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f: \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c shell-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441\u043e \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u0432 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 URI, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0447\u0435\u0440\u0435\u0437 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 &#171;ProxyCommand&#187; \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0439 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 &#171;%u&#187;. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u044b, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-144216","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 10.1, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 10.1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 10.1, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-10-06T15:11:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-10-06T15:11:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 10.1 izlaidums | ProHoster","description":"Ir izn\u0101cis OpenSSH 10.1, atv\u0113rt\u0101s klienta un servera realiz\u0101cijas SSH 2.0 un SFTP protokolu darbam.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 10.1 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 10.1, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-06T15:11:54+00:00","article:modified_time":"2025-10-06T15:11:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"144216","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 15:10:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:10:23","updated":"2026-01-23 15:10:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/144216","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=144216"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/144216\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=144216"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=144216"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=144216"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}