{"id":182500,"date":"2026-07-07T04:53:59","date_gmt":"2026-07-07T02:54:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-openssh-10-4"},"modified":"2026-07-07T04:53:59","modified_gmt":"2026-07-07T02:54:00","slug":"dostupen-openssh-10-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/dostupen-openssh-10-4","title":{"rendered":"Pieejams OpenSSH 10.4","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u0113c tr\u012bs m\u0113ne\u0161u izstr\u0101des ir public\u0113ta OpenSSH 10.4 versija, atv\u0113rt\u0101 klienta un servera \u012bstenojums SSH 2.0 un SFTP protokoliem. Galven\u0101s izmai\u0146as:  <\/p>\n<ul>\n<li class=\"l\"> Pievienota eksperiment\u0101la atbalsts kombin\u0113tajai digit\u0101lo parakstu sh\u0113mai &#171;mldsa44-ed25519&#187;, kas apvieno postkvantu algoritmu ML-DSA 44 un eliptisko l\u012bk\u0146u algoritmu Ed25519. Lai aktiviz\u0113tu atbalstu, j\u0101pievieno &#171;mldsa44-ed25519&#187; HostKeyAlgorithms un PubkeyAcceptedAlgorithms direkt\u012bv\u0101s. Atsl\u0113gu \u0123ener\u0113\u0161anai var izmantot komandu &#171;ssh-keygen -t mldsa44-ed25519&#187;.\n<li class=\"l\"> Sist\u0113m\u0101 ssh un sshd ieviesta jauna paraugu atbilst\u012bbas sist\u0113ma, kas balst\u012bta uz nedeterministisko gal\u012bgu autom\u0101tu un nav pak\u013cauta sare\u017e\u0123\u012bt\u012bbas izsist\u012b\u0161anas probl\u0113mai, lietojot maskas ar daudz &#171;*&#187; simboliem.\n<li class=\"l\"> Ir main\u012bjies linux versiju sshd uzved\u012bba ar aktiviz\u0113tu sist\u0113mas izsaukumu filtr\u0113\u0161anu, izmantojot seccomp. Agr\u0101k av\u0101rija, aktiviz\u0113jot SECCOMP vai NO_NEW_PRIVS Linux sist\u0113m\u0101s, uz kur\u0101m tie neattiecas, izrais\u012bja br\u012bdin\u0101jumu \u017eurn\u0101l\u0101 un turpin\u0101ja darbu bez izol\u0101cijas, bet tagad tas izraisa av\u0101rijas izbeig\u0161anu.\n<li class=\"l\"> Izmantojot opciju &#171;sshd -G&#187;, konfigur\u0101cijas dump\u0101 direkt\u012bvas tagad tiek ierakst\u012btas, izmantojot gan lielos, gan mazos burtus, nevis tikai mazos (piem\u0113ram, &#171;PubkeyAuthentication&#187; viet\u0101 &#171;pubkeyauthentication&#187;).\n<li class=\"l\"> ssh un sshd uzved\u012bba ir piel\u0101gota RFC 4253 standartam: zi\u0146ojumi, kas saist\u012bti ar atsl\u0113gu apmai\u0146u, tagad izrais\u012bs savienojuma izbeig\u0161anu laik\u0101, kad notiek atsl\u0113gu apmai\u0146a. Agr\u0101k uzbruc\u0113ji var\u0113ja organiz\u0113t DoS uzbrukumus, bezgal\u012bgi nos\u016btot tre\u0161o pu\u0161u zi\u0146ojumus atsl\u0113gu apmai\u0146as proces\u0101, kas tika buferiz\u0113ti un pat\u0113r\u0113ja atmi\u0146u. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/server\/dts-dronten\/\" title=\"serveri\" data-wpil-keyword-link=\"linked\">serveri<\/a> un pat\u0113r\u0113ja atmi\u0146u.            <\/ul>\n<p>Tika nov\u0113rstas vair\u0101kas dro\u0161\u012bbas probl\u0113mas:  <\/p>\n<ul>\n<li class=\"l\"> ssh util\u012bt\u0113 tika nov\u0113rsta potenci\u0101la piek\u013cuve atmi\u0146ai p\u0113c t\u0101s atbr\u012bvo\u0161anas (use-after-free), piek\u013c\u016bstot \u013caunpr\u0101t\u012bgajam <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/server\/dts-shicago\/\" title=\"serverim\" data-wpil-keyword-link=\"linked\">serverim<\/a>. Probl\u0113ma tiek ekspon\u0113ta, mainot hosta atsl\u0113gu atsl\u0113gu apmai\u0146as laik\u0101.\n<li class=\"l\"> Vainojam\u012bba sftp, kas \u013cauj aug\u0161upiel\u0101d\u0113t failus cit\u0101 direktorij\u0101, piek\u013c\u016bstot \u013caunpr\u0101t\u012bgam serverim, izmantojot komandu form\u0101 &#171;sftp host: \/path .&#187;.\n<li class=\"l\"> V\u0101j\u012bba scp, kas \u013cauj, kop\u0113jot failus starp div\u0101m \u0101r\u0113j\u0101m secin\u0101jumiem. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/lv\/server\/dts-dusseldorf\/\" title=\"serveriem\" data-wpil-keyword-link=\"linked\">serveriem<\/a>, no kura viens ir pak\u013cauts uzbruc\u0113jam, organiz\u0113t failu ierakst\u012b\u0161anu vec\u0101kaj\u0101 direktorij\u0101, kas atrodas zem m\u0113r\u0137a direktorijas l\u012bme\u0146a.\n<li class=\"l\"> Atrisin\u0101ta probl\u0113ma sshd, kas izpau\u017eas, lietojot iek\u0161\u0113jo SFTP servera realiz\u0101ciju (&#171;internal-sftp&#187;), kas p\u0113c noklus\u0113juma ir izsl\u0113gta. Probl\u0113ma ir saist\u012bta ar garu sekvences izsist\u012b\u0161anu komand\u0101s p\u0113c 9 argumenta, kas var izrais\u012bt sekojo\u0161o argumentu izme\u0161anu. T\u0101d\u0113j\u0101di var tikt izsisti dro\u0161\u012bbas pas\u0101kumi.\n<li class=\"l\"> Sshd nov\u0113rsta nepiln\u012bba, d\u0113\u013c kuras direkt\u012bva &#171;DisableForwarding=yes&#187; neizsl\u0113dza tunel\u0113\u0161anas iesp\u0113ju, ko \u013c\u0101va &#171;PermitTunnel=yes&#187; (p\u0113c noklus\u0113juma nav iestat\u012bta).\n<li class=\"l\"> Sshd nov\u0113rsta probl\u0113ma, ko var\u0113ja izmantot, lai inici\u0113tu atteik\u0161anu pakalpojumu snieg\u0161an\u0101 pirms autentifik\u0101cijas procesa, ja GSSAPIAuthentication direkt\u012bva ir aktiviz\u0113ta (p\u0113c noklus\u0113juma izsl\u0113gta). Probl\u0113ma netiek ierobe\u017eota ar limita &#171;MaxAuthTries&#187;, bet ir pak\u013cauta ierobe\u017eojumam &#171;PerSourcePenalties&#187;.\n<li class=\"l\"> sshd tika nov\u0113rsta nepiln\u012bba, kuru d\u0113\u013c netika vienm\u0113r pievienota minim\u0101l\u0101 kav\u0113\u0161an\u0101s starp autentifik\u0101cijas m\u0113\u0123in\u0101jumiem.        <\/ul>\n<p>Avots: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65854\">opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f: \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 &#171;mldsa44-ed25519&#187;, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0439 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c ML-DSA 44 \u0438 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0440\u0438\u0432\u044b\u0445 Ed25519. \u0414\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c &#171;mldsa44-ed25519&#187; \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b HostKeyAlgorithms \u0438 PubkeyAcceptedAlgorithms. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182500","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/news\/dostupen-openssh-10-4\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d OpenSSH 10.4 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/news\/dostupen-openssh-10-4\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-07T02:54:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-07T02:54:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 10.4 ir pieejams | ProHoster","description":"P\u0113c tr\u012bs m\u0113ne\u0161u izstr\u0101des tika public\u0113ts OpenSSH 10.4 izlaidums, atv\u0113rt\u0101 klienta un servera \u012bstenojums SSH 2.0 un SFTP protokoliem.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/dostupen-openssh-10-4","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d OpenSSH 10.4 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/dostupen-openssh-10-4","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-07T02:54:00+00:00","article:modified_time":"2026-07-07T02:54:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182500","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:08","updated":"2026-08-05 12:22:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/182500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=182500"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/182500\/revisions"}],"predecessor-version":[{"id":182564,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/182500\/revisions\/182564"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=182500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=182500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=182500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}