{"id":167221,"date":"2026-04-02T23:11:54","date_gmt":"2026-04-02T21:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-10-3"},"modified":"2026-04-04T11:22:40","modified_gmt":"2026-04-04T09:22:40","slug":"reliz-openssh-10-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-3","title":{"rendered":"OpenSSH 10.3 izlaidums","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pusst p\u0113c pusgada izstr\u0101des public\u0113ts OpenSSH 10.3, atv\u0113rt\u0101s versijas klients un <a href=\"https:\/\/prohoster.info\/lv\/server\/\">serveris<\/a> darbam ar SSH 2.0 un SFTP protokoliem. Galven\u0101s izmai\u0146as:<\/p>\n<ul>\n<li class=\"l\">Nov\u0113rsta ievainojam\u012bba, kas \u013cauj uzbruc\u0113jam, kur\u0161 kontrol\u0113 lietot\u0101jv\u0101rdu, kas tiek nodots, palai\u017eot ssh util\u012btu, potenci\u0101li izpild\u012bt patva\u013c\u012bgas shell komandas. Ievainojam\u012bba izpau\u017eas sist\u0113m\u0101s, kas izmanto aizvieto\u0161anu \u00ab%u\u00bb da\u017e\u0101s konfigur\u0101cijas faila direkt\u012bv\u0101s, piem\u0113ram, \u00abMatch exec\u00bb. Probl\u0113ma radusies no speci\u0101lo simbolu p\u0101rbaudes lietot\u0101jv\u0101rd\u0101 p\u0113c %-aizvieto\u0161anas ssh_config konfigur\u0101cijas fail\u0101.<\/li>\n<li class=\"l\">Nov\u0113rsta dro\u0161\u012bbas probl\u0113ma sshd, ko izrais\u012bja nepareiza authorized_keys opcijas principals=\u00bb\u00bb saska\u0146o\u0161ana ar nosaukumu (principals) sarakstu sertifik\u0101t\u0101, ja nosaukumos tika nor\u0101d\u012bts simbols \u00ab,\u00bb . Lai izmantotu ievainojam\u012bbu, ir j\u0101nor\u0101da vair\u0101ki v\u0101rdi opcij\u0101 authorized_keys principals=\u00bb\u00bb un j\u0101ieg\u016bst sertifik\u0101ts no sertifik\u0101cijas iest\u0101des ar vair\u0101kiem nosaukumiem, kas atdal\u012bti ar komatu (parasti tas nav at\u013cauts). Main\u012bta uzved\u012bba attiec\u012bb\u0101 uz sertifik\u0101tiem ar tuk\u0161u v\u0101rdu \u2014 agr\u0101k tuk\u0161ais v\u0101rds attiec\u0101s uz vis\u0101m authorized_keys principals=\u00bb\u00bb opcij\u0101m, bet tagad neattiec\u0101s.<\/li>\n<li class=\"l\">scp nov\u0113rsta probl\u0113ma, d\u0113\u013c kuras p\u0113c faila aug\u0161upiel\u0101des ar root ties\u012bb\u0101m, nor\u0101dot opciju \u00ab-O\u00bb un bez opcijas \u00ab-p\u00bb, netika not\u012br\u012bti setuid\/setgid karodzi\u0146i.<\/li>\n<li class=\"l\">sshd labota probl\u0113ma ar ECDSA atsl\u0113gu apstr\u0101di direkt\u012bv\u0101s PubkeyAcceptedAlgorithms un HostbasedAcceptedAlgorithms, d\u0113\u013c kuras, nor\u0101dot jebkuru ECDSA algoritmu (piem\u0113ram, \u00abecdsa-sha2-nistp384\u00bb), tika pie\u0146emti ar\u012b visi p\u0101r\u0113jie ECDSA algoritmi, pat ja tie nepavisam nebija uzskait\u012bti at\u013cauto sarakst\u0101.<\/li>\n<li class=\"l\">ssh un sshd mijiedarb\u012bb\u0101 ar SSH a\u0123entiem pievienota atbalsts identific\u0113t\u0101jiem (codepoint), kas defin\u0113ti IANA specifik\u0101cij\u0101 draft-ietf-sshm-ssh-agent. Iepriek\u0161 izmantoto identific\u0113t\u0101ju veids \u00ab@openssh.com\u00bb atbalsts ir saglab\u0101ts.<\/li>\n<li class=\"l\">ssh-agent ieviesta papla\u0161in\u0101jums \u00abquery\u00bb, kas defin\u0113ts specifik\u0101cij\u0101 draft-ietf-sshm-ssh-agent un \u013cauj noteikt atbalst\u012bt\u0101s a\u0123enta funkcijas. Lai piepras\u012btu atbalst\u012bto protokola papla\u0161in\u0101jumu sarakstu caur \u00abquery\u00bb piepras\u012bjumu, util\u012bt\u0113 ssh-add pievienota opcija \u00ab-Q\u00bb.<\/li>\n<li class=\"l\">sshd_config \u013cauts nor\u0101d\u012bt vair\u0101kus failus direkt\u012bv\u0101 RevokedKeys, bet ssh_config \u2014 direkt\u012bv\u0101 RevokedHostKeys.<\/li>\n<li class=\"l\">Ssh ir pievienota escape komanda \u00ab~I\u00bb un opcija \u00ab-O conninfo\u00bb, lai par\u0101d\u012btu inform\u0101ciju par pa\u0161reiz\u0113jo savienojumu, k\u0101 ar\u012b opcija \u00ab-O channels\u00bb, lai par\u0101d\u012btu inform\u0101ciju par atv\u0113rtajiem kan\u0101liem.<\/li>\n<li class=\"l\">Sshd direkt\u012bv\u0101 PerSourcePenalties ir ieviesta opcija \u2018invaliduser\u2019, lai pievienotu aizturi gad\u012bjum\u0101, ja tiek m\u0113\u0123in\u0101ts pieteikties k\u0101 neeso\u0161am lietot\u0101jam (p\u0113c noklus\u0113juma 5 sekundes). Ir pievienota iesp\u0113ja nor\u0101d\u012bt nemain\u012bgas aiztures v\u0113rt\u012bbas.<\/li>\n<li class=\"l\">Sshd ir pievienota opcija GSSAPIDelegateCredentials, lai p\u0101rvald\u012btu dele\u0123\u0113to akredit\u0101cijas datu sa\u0146em\u0161anu, ko nodro\u0161ina klients.<\/li>\n<li class=\"l\">Ssh-keygen ir pievienota atbalsta iesp\u0113ja ED25519 atsl\u0113gu ierakst\u012b\u0161anai PKCS8 form\u0101t\u0101.<\/li>\n<li class=\"l\">Ir pievienots atbalsts digit\u0101lo parakstu sh\u0113mai ed25519, ko \u012bsteno libcrypto.<\/li>\n<\/ul>\n<p>Avots: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65126\">opennet.lv<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f: \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b ssh, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 shell-\u043a\u043e\u043c\u0430\u043d\u0434. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 &#171;%u&#187; \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0430\u0445 \u0444\u0430\u0439\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a &#171;Match exec&#187;. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-167221","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 10.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-02T21:11:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-04T09:22:40+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 10.3 izlaidums | ProHoster","description":"Pusst p\u0113c se\u0161iem m\u0113ne\u0161iem izstr\u0101des ir public\u0113ts OpenSSH 10.3, atv\u0113rt\u0101s koda klienta un servera izlaidums darbam, izmantojot SSH 2.0 un SFTP protokolus.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 10.3 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-10-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-02T21:11:54+00:00","article:modified_time":"2026-04-04T09:22:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/167221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=167221"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/167221\/revisions"}],"predecessor-version":[{"id":167487,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/167221\/revisions\/167487"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=167221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=167221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=167221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}