{"id":167221,"date":"2026-04-02T23:11:54","date_gmt":"2026-04-02T21:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-10-3"},"modified":"2026-04-04T11:22:40","modified_gmt":"2026-04-04T09:22:40","slug":"reliz-openssh-10-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/news\/reliz-openssh-10-3","title":{"rendered":"Lansering av OpenSSH 10.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Etter et halvt \u00e5rs utvikling er OpenSSH 10.3, en \u00e5pen implementering av klienten, utgitt. <a href=\"https:\/\/prohoster.info\/no\/server\/\">serveren<\/a> for arbeid med SSH 2.0 og SFTP-protokoller. Hovedendringene er:<\/p>\n<ul>\n<li class=\"l\">S\u00e5rbarheten som till\u00e4t en angripare att kontrollera anv\u00e4ndarnamnet som skickades vid k\u00f6rning av ssh-verktyget har \u00e5tg\u00e4rdats, vilket potentiellt kunde leda till k\u00f6rning av godtyckliga shell-kommandon. S\u00e5rbarheten upptr\u00e4der i system som anv\u00e4nder substitutionen &#171;%u&#187; i vissa direktiv i konfigurationsfilen, s\u00e5som &#171;Match exec&#187;. Problemet orsakas av kontrollen av specialtecken i anv\u00e4ndarnamnet efter att %-substitutioner har utf\u00f6rts i ssh-config-filen.<\/li>\n<li class=\"l\">Ett s\u00e4kerhetsproblem i sshd relaterat till felaktig matchning av alternativet authorized_keys principals=&#187;&#187; med namnen (principals) i certifikatet har \u00e5tg\u00e4rdats, n\u00e4r namnen inneh\u00f6ll kommatecknet &#171;,&#187;. F\u00f6r att utnyttja s\u00e5rbarheten m\u00e5ste det i alternativet authorized_keys principals=&#187;&#187; anges flera namn, och certifikatutf\u00e4rdaren m\u00e5ste ha utf\u00e4rdat ett certifikat med flera namn separerade med kommatecken (vilket vanligtvis inte till\u00e5ts). Beteendet g\u00e4llande certifikat med tomma namn har \u00e4ndrats \u2013 tidigare omfattades tomma namn av alla alternativ i authorized_keys principals=&#187;&#187;, men nu omfattas de inte.<\/li>\n<li class=\"l\">I scp har ett problem \u00e5tg\u00e4rdats som gjorde att setuid\/setgid-flaggor inte rensades efter att en fil laddades upp med root-r\u00e4ttigheter med alternativet &#171;-O&#187; och utan alternativet &#171;-p&#187;.<\/li>\n<li class=\"l\">I sshd har ett problem med hantering av ECDSA-nycklar i direktiven PubkeyAcceptedAlgorithms och HostbasedAcceptedAlgorithms \u00e5tg\u00e4rdats, vilket innebar att n\u00e4r n\u00e5gon ECDSA-algoritm angavs (t.ex. &#171;ecdsa-sha2-nistp384&#187;) b\u00f6rjade \u00e4ven andra ECDSA-baserade algoritmer accepteras, \u00e4ven om de inte uttryckligen listades som till\u00e5tna.<\/li>\n<li class=\"l\">I ssh och sshd har st\u00f6d f\u00f6r identifierare (codepoint) definierade av IANA i specifikationen draft-ietf-sshm-ssh-agent lagts till vid interaktion med SSH-agenter. St\u00f6det f\u00f6r tidigare anv\u00e4nda identifierare av typen &#171;@openssh.com&#187; har bevarats.<\/li>\n<li class=\"l\">I ssh-agent har f\u00f6rl\u00e4ngningen &#171;query&#187;, definierad i specifikationen draft-ietf-sshm-ssh-agent, implementerats f\u00f6r att identifiera de funktioner som agenten st\u00f6der. F\u00f6r att beg\u00e4ra en lista \u00f6ver st\u00f6dda protokollf\u00f6rl\u00e4ngningar har alternativet &#171;-Q&#187; lagts till ssh-add-verktyget.<\/li>\n<li class=\"l\">I sshd_config har det blivit till\u00e5tet att ange flera filer i direktivet RevokedKeys, och i ssh_config \u2013 i direktivet RevokedHostKeys.<\/li>\n<li class=\"l\">I ssh er det lagt til en escape-kommando \u00ab~I\u00bb og en opsjon \u00ab-O conninfo\u00bb for \u00e5 vise informasjon om den n\u00e5v\u00e6rende tilkoblingen, samt en opsjon \u00ab-O channels\u00bb for \u00e5 vise informasjon om \u00e5pne kanaler.<\/li>\n<li class=\"l\">I sshd er det implementert en opsjon 'invaliduser' i direktivet PerSourcePenalties for \u00e5 legge til en forsinkelse ved fors\u00f8k p\u00e5 innlogging med en ikke-eksisterende bruker (standard 5 sekunder). Det er ogs\u00e5 lagt til mulighet for \u00e5 spesifisere ikke-hele verdier for forsinkelse.<\/li>\n<li class=\"l\">I sshd er alternativet GSSAPIDelegateCredentials lagt til for \u00e5 h\u00e5ndtere mottak av delegerte legitimasjoner gitt av klienten.<\/li>\n<li class=\"l\">I ssh-keygen er det lagt til st\u00f8tte for \u00e5 skrive ED25519-n\u00f8kler i PKCS8-format.<\/li>\n<li class=\"l\">Det er lagt til st\u00f8tte for digitale signaturordninger ed25519, implementert via libcrypto.<\/li>\n<\/ul>\n<p>Kilde: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65126\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f: \u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0435 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b ssh, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 shell-\u043a\u043e\u043c\u0430\u043d\u0434. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 &#171;%u&#187; \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0430\u0445 \u0444\u0430\u0439\u043b\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a &#171;Match exec&#187;. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-167221","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/no\/blog\/news\/reliz-openssh-10-3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"nn_NO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 10.3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/no\/blog\/news\/reliz-openssh-10-3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-02T21:11:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-04T09:22:40+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Utgivelsen av OpenSSH 10.3 | ProHoster","description":"Etter et halvt \u00e5rs utvikling er OpenSSH 10.3 utgitt, en \u00e5pen implementering av klient og server for arbeid med SSH 2.0- og SFTP-protokoller.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/news\/reliz-openssh-10-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 10.3 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.3, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/no\/blog\/news\/reliz-openssh-10-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-02T21:11:54+00:00","article:modified_time":"2026-04-04T09:22:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/167221","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=167221"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/167221\/revisions"}],"predecessor-version":[{"id":167487,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/167221\/revisions\/167487"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=167221"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=167221"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=167221"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}