{"id":182500,"date":"2026-07-07T04:53:59","date_gmt":"2026-07-07T02:54:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-openssh-10-4"},"modified":"2026-07-07T04:53:59","modified_gmt":"2026-07-07T02:54:00","slug":"dostupen-openssh-10-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-openssh-10-4","title":{"rendered":"OpenSSH 10.4 este disponibil","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Dup\u0103 trei luni de dezvoltare, a fost lansat\u0103 versiunea OpenSSH 10.4, o implementare deschis\u0103 a clientului \u0219i serverului pentru protocoalele SSH 2.0 \u0219i SFTP. Principalele modific\u0103ri:  <\/p>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat suport experimental pentru schema combinat\u0103 de generare a semn\u0103turilor digitale &#171;mldsa44-ed25519&#187;, care combin\u0103 algoritmul postcuantic ML-DSA 44 \u0219i algoritmul bazat pe curbele eliptice Ed25519. Pentru a activa suportul, ad\u0103uga\u021bi &#171;mldsa44-ed25519&#187; \u00een directivele HostKeyAlgorithms \u0219i PubkeyAcceptedAlgorithms. Pentru generarea cheilor, se poate utiliza comanda &#171;ssh-keygen -t mldsa44-ed25519&#187;.\n<li class=\"l\"> \u00cen ssh \u0219i sshd a fost implementat\u0103 o nou\u0103 versiune a sistemului de potrivire prin tipare, bazat\u0103 pe un automat finit nedeterminist \u0219i care nu sufer\u0103 de problema cre\u0219terii exponen\u021biale a complexit\u0103\u021bii calculului atunci c\u00e2nd se folosesc m\u0103\u0219ti ce con\u021bin mul\u021bi simboluri &#171;*&#187;.\n<li class=\"l\"> Comportamentul versiunilor Linux ale sshd cu filtrare a apelurilor de sistem activat\u0103 prin seccomp a fost modificat. Anterior, o eroare la activarea SECCOMP sau NO_NEW_PRIVS pe sistemele Linux f\u0103r\u0103 suport pentru acestea ducea la scrierea unei avertiz\u0103ri \u00een jurnal \u0219i continuarea func\u021bion\u0103rii f\u0103r\u0103 izolare, iar acum va duce la o \u00eencheiere brusc\u0103.\n<li class=\"l\"> C\u00e2nd se folose\u0219te op\u021biunea &#171;sshd -G&#187;, \u00een dumpul de configura\u021bie directivele sunt acum scrise folosind litere mari \u0219i mici, \u00een loc s\u0103 fie scrise doar cu litere mici (de exemplu, &#171;PubkeyAuthentication&#187; \u00een loc de &#171;pubkeyauthentication&#187;).\n<li class=\"l\"> Comportamentul ssh \u0219i sshd a fost aliniat la standardul RFC 4253: trimiterea de mesaje \u00een timpul re\u00eennoirii cheilor care nu sunt legate de schimbul de chei va duce acum la \u00eencheierea conexiunii. Anterior, atacatorii puteau lansa un atac DoS, trimi\u021b\u00e2nd \u00een mod repetat mesaje str\u0103ine \u00een timpul schimbului de chei, care erau tamponate pe <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-dronten\/\" title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a> \u0219i consumau memorie.            <\/ul>\n<p>Au fost remediate mai multe probleme de securitate:  <\/p>\n<ul>\n<li class=\"l\"> \u00cen utilitarul ssh a fost eliminat\u0103 o poten\u021bial\u0103 accesare a memoriei dup\u0103 ce aceasta a fost eliberat\u0103 (use-after-free) la accesarea unui malware <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-shicago\/\" title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a>. Problema este exploatat\u0103 prin modificarea cheii de gazd\u0103 \u00een timpul re\u00eennoirii cheilor.\n<li class=\"l\"> O vulnerabilitate \u00een sftp permite \u00eenc\u0103rcarea unui fi\u0219ier \u00eentr-un alt director atunci c\u00e2nd se acceseaz\u0103 un server mali\u021bios folosind o comand\u0103 \u00een form\u0103 &#171;sftp host: \/path .&#187;.\n<li class=\"l\"> O vulnerabilitate \u00een scp, care permite copierea fi\u0219ierelor \u00eentre dou\u0103 surse externe <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-dusseldorf\/\" title=\"servers\" data-wpil-keyword-link=\"linked\">servers<\/a>, unul dintre care este controlat de atacator, organizarea scrierii fi\u0219ierelor \u00een directorul p\u0103rinte, aflat la un nivel inferior directorului \u021bint\u0103.\n<li class=\"l\"> A fost rezolvat\u0103 o problem\u0103 \u00een sshd, care ap\u0103rea la utilizarea implement\u0103rii interne a serverului SFTP (&#171;internal-sftp&#187;), dezactivat\u0103 \u00een mod implicit. Problema este legat\u0103 de t\u0103ierea secven\u021belor lungi \u00een linia de comand\u0103 dup\u0103 al nou\u0103lea argument, conduc\u00e2nd la respingerea urm\u0103toarelor argumente. Astfel, op\u021biuni de securitate ar putea fi respinse.\n<li class=\"l\"> \u00cen sshd a fost corectat\u0103 o omisiune prin care directiva &#171;DisableForwarding=yes&#187; nu dezactiva posibilitatea de a crea tuneluri, permise de op\u021biunea &#171;PermitTunnel=yes&#187; (care nu este setat\u0103 \u00een mod implicit).\n<li class=\"l\"> \u00cen sshd a fost rezolvat\u0103 o problem\u0103 care putea fi utilizat\u0103 pentru a ini\u021bia un refuz de serviciu \u00eenainte de autentificare, atunci c\u00e2nd directiva GSSAPIAuthentication era activat\u0103 \u00een configurare (dezactivat\u0103 \u00een mod implicit). Problema nu este blocat\u0103 prin limita &#171;MaxAuthTries&#187;, dar se \u00eencadreaz\u0103 sub restric\u021bia &#171;PerSourcePenalties&#187;.\n<li class=\"l\"> \u00cen sshd au fost corectate deficien\u021bele care nu ad\u0103ugau \u00eentotdeauna o \u00eent\u00e2rziere minim\u0103 \u00eentre \u00eencerc\u0103rile de autentificare.        <\/ul>\n<p>Sursa: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65854\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f: \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 &#171;mldsa44-ed25519&#187;, \u0441\u043e\u0447\u0435\u0442\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0441\u0442\u043a\u0432\u0430\u043d\u0442\u043e\u0432\u044b\u0439 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c ML-DSA 44 \u0438 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u0440\u0438\u0432\u044b\u0445 Ed25519. \u0414\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c &#171;mldsa44-ed25519&#187; \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b HostKeyAlgorithms \u0438 PubkeyAcceptedAlgorithms. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182500","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-openssh-10-4\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d OpenSSH 10.4 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-openssh-10-4\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-07-07T02:54:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-07T02:54:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Disponibil OpenSSH 10.4 | ProHoster","description":"Dup\u0103 trei luni de dezvoltare, a fost lansat\u0103 versiunea OpenSSH 10.4, o implementare deschis\u0103 a clientului \u0219i serverului pentru a func\u021biona cu protocoalele SSH 2.0 \u0219i SFTP.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-openssh-10-4","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d OpenSSH 10.4 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a OpenSSH 10.4, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/dostupen-openssh-10-4","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-07T02:54:00+00:00","article:modified_time":"2026-07-07T02:54:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182500","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:08","updated":"2026-08-05 12:22:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/182500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=182500"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/182500\/revisions"}],"predecessor-version":[{"id":182564,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/182500\/revisions\/182564"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=182500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=182500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=182500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}