{"id":112310,"date":"2023-12-19T03:10:31","date_gmt":"2023-12-19T01:10:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-9-6-c-ustraneniem-uyazvimostej"},"modified":"2023-12-19T03:10:31","modified_gmt":"2023-12-19T01:10:31","slug":"reliz-openssh-9-6-c-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-9-6-c-ustraneniem-uyazvimostej","title":{"rendered":"Lansarea OpenSSH 9.6 cu remedierea vulnerabilit\u0103\u021bilor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A fost publicat lansarea OpenSSH 9.6, o implementare open-source a clientului \u0219i serverului pentru protocoalele SSH 2.0 \u0219i SFTP. \u00cen noua versiune au fost rezolvate trei probleme de securitate:     <\/p>\n<ul>\n<li class=\"l\"> O vulnerabilitate \u00een protocolul SSH (CVE-2023-48795, atacul \u201eTerrapin\u201d), care permite, \u00een cadrul unui atac MITM, s\u0103 degradeze conexiunea la utilizarea unor algoritmi de autentificare mai pu\u021bin siguri \u0219i s\u0103 dezactiveze protec\u021bia \u00eempotriva atacurilor prin canale externe, recre\u00e2nd introducerea prin analiza \u00eent\u00e2rzierilor \u00eentre ap\u0103s\u0103rile pe tastatur\u0103. Metoda de atac este detaliat\u0103 \u00eentr-un articol separat.\n<li class=\"l\"> O vulnerabilitate \u00een utilitarul ssh, care permite substitu\u021bia comenzilor shell arbitrare prin manipularea valorilor de utilizator \u0219i gazd\u0103, care con\u021bin caractere speciale. Vulnerabilitatea poate fi exploatat\u0103 dac\u0103 atacatorul controleaz\u0103 valorile utilizatorului \u0219i numelui gazdei transmise \u00een ssh, directivele ProxyCommand \u0219i LocalCommand sau blocurile \u201ematch exec\u201d, \u00een care sunt specificate caracterele de substitu\u021bie, cum ar fi %u \u0219i %h. De exemplu, un utilizator \u0219i o gazd\u0103 incorecte pot fi introduse \u00een sistemele care utilizeaz\u0103 submodule \u00een Git, deoarece Git nu interzice specificarea caracterelor speciale \u00een numele gazdei \u0219i al utilizatorului. O vulnerabilitate similar\u0103 se manifest\u0103 \u0219i \u00een libssh.\n<li class=\"l\"> O eroare \u00een ssh-agent, din cauza c\u0103reia, atunci c\u00e2nd se adaug\u0103 chei private PKCS#11, restric\u021biile se aplicau doar primei chei returnate de tokenul PKCS#11. Problema nu afecteaz\u0103 cheile private obi\u0219nuite, tokenurile FIDO \u0219i cheile specificate f\u0103r\u0103 restric\u021bii.  <\/ul>\n<p>Celelalte modific\u0103ri:   <\/p>\n<ul>\n<li class=\"l\"> \u00cen ssh a fost ad\u0103ugat\u0103 substitu\u021bia \u201e%j\u201d, care se extinde \u00een numele gazdei specificate prin directiva ProxyJump.\n<li class=\"l\"> \u00cen ssh a fost ad\u0103ugat\u0103 suportul pentru configurarea ChannelTimeout pe partea clientului, care poate fi utilizat pentru a \u00eencheia canalele inactive.\n<li class=\"l\"> \u00cen ssh, sshd, ssh-add \u0219i ssh-keygen a fost ad\u0103ugat\u0103 suportul pentru citirea cheilor private ED25519 \u00een format PEM PKCS8 (anterior era acceptat doar formatul OpenSSH).\n<li class=\"l\"> \u00cen ssh \u0219i sshd a fost ad\u0103ugat un extensie a protocolului pentru renegocierea algoritmilor de semn\u0103tur\u0103 digital\u0103 pentru autentificarea prin chei publice, care se desf\u0103\u0219oar\u0103 \u00een etapa de dup\u0103 primirea datelor despre utilizator. De exemplu, prin intermediul extensiei, se pot utiliza selectiv alte algoritmi \u00een leg\u0103tur\u0103 cu utilizatorii prin specificarea PubkeyAcceptedAlgorithms \u00een blocul \u201eMatch user\u201d.\n<li class=\"l\"> \u00cen ssh-add \u0219i ssh-agent a fost ad\u0103ugat un extensor de protocol pentru specifarea certificatelor la \u00eenc\u0103rcarea cheilor PKCS#11, ceea ce permite utilizarea certificatelor asociate cheilor private PKCS#11 \u00een toate utilitarele OpenSSH care suport\u0103 ssh-agent, nu doar \u00een ssh.\n<li class=\"l\"> A fost \u00eembun\u0103t\u0103\u021bit\u0103 identificarea flag-urilor de compilator neacceptate sau instabile, cum ar fi \u201e-fzero-call-used-regs\u201d \u00een clang.\n<li class=\"l\"> Pentru a limita privilegiile procesului sshd \u00een versiunile OpenSolaris care suport\u0103 interfa\u021ba getpflags(), a fost activat modul PRIV_XPOLICY \u00een loc de PRIV_LIMIT.      <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60305\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.6, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0442\u0440\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SSH (CVE-2023-48795, \u0430\u0442\u0430\u043a\u0430 &#171;Terrapin&#187;), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432 \u0445\u043e\u0434\u0435 MITM-\u0430\u0442\u0430\u043a\u0438 \u043e\u0442\u043a\u0430\u0442\u0438\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u043d\u0435\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0438\u043c \u0432\u0432\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112310","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.6, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-9-6-c-ustraneniem-uyazvimostej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 9.6 c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.6, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-9-6-c-ustraneniem-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-12-19T01:10:31+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-12-19T01:10:31+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea OpenSSH 9.6 cu remedierea vulnerabilit\u0103\u021bilor | ProHoster","description":"A fost lansat\u0103 versiunea OpenSSH 9.6, o implementare deschis\u0103 a clientului \u0219i serverului pentru lucrul cu protocoalele SSH 2.0 \u0219i SFTP.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-9-6-c-ustraneniem-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 9.6 c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.6, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-9-6-c-ustraneniem-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-19T01:10:31+00:00","article:modified_time":"2023-12-19T01:10:31+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112310","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112310"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112310\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112310"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112310"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}