{"id":103424,"date":"2022-02-24T15:36:49","date_gmt":"2022-02-24T13:36:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-8-9-s-ustraneniem-uyazvimosti-v-sshd"},"modified":"2022-02-24T15:36:49","modified_gmt":"2022-02-24T13:36:49","slug":"reliz-openssh-8-9-s-ustraneniem-uyazvimosti-v-sshd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/reliz-openssh-8-9-s-ustraneniem-uyazvimosti-v-sshd","title":{"rendered":"L\u00ebshimi i OpenSSH 8.9 q\u00eb adreson vulnerabilitetin n\u00eb sshd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pas gjasht\u00eb muajsh zhvillimi, \u00ebsht\u00eb paraqitur l\u00ebshimi i OpenSSH 8.9, nj\u00eb implementim t\u00eb hapur t\u00eb klientit dhe serverit p\u00ebr funksionimin me protokollet SSH 2.0 dhe SFTP. N\u00eb k\u00ebt\u00eb version, vulnerabiliteti n\u00eb sshd \u00ebsht\u00eb adresuar, i cili potencialisht lejon qasje pa autentifikim. Problemi shkaktohet nga nj\u00eb tepric\u00eb e numrave n\u00eb kodin e autentifikimit, por p\u00ebrdorimi i tij \u00ebsht\u00eb i mundur vet\u00ebm n\u00eb kombinim me gabime t\u00eb tjera logjike n\u00eb kod.    <\/p>\n<p> N\u00eb form\u00ebn aktuale, vulnerabiliteti nuk \u00ebsht\u00eb i shfryt\u00ebzuesh\u00ebm kur aktivizohet moda e ndarjes s\u00eb privilegjeve, pasi shfaqja e tij bllokohet nga verifikime t\u00eb ve\u00e7anta q\u00eb kryhen n\u00eb kodin e mbik\u00ebqyrjes s\u00eb ndarjes s\u00eb privilegjeve. Moda e ndarjes s\u00eb privilegjeve \u00ebsht\u00eb aktivizuar si parazgjedhje q\u00eb nga viti 2002, duke filluar me OpenSSH 3.2.2, dhe \u00ebsht\u00eb b\u00ebr\u00eb e detyrueshme q\u00eb nga l\u00ebshimi i OpenSSH 7.5, i publikuar n\u00eb vitin 2017. P\u00ebr m\u00eb tep\u00ebr, n\u00eb versionet e portuara t\u00eb OpenSSH q\u00eb nga l\u00ebshimi 6.5 (viti 2014), vulnerabiliteti bllokohet duke u kompilar me aktivizimin e flamujve t\u00eb mbrojtjes nga tepricat e numrave.       <\/p>\n<p>Ndryshime t\u00eb tjera:  <\/p>\n<ul>\n<li class=\"l\"> N\u00eb versionin portativ t\u00eb OpenSSH, mb\u00ebshtetje e nd\u00ebrtuar p\u00ebr hashing-in e fjal\u00ebkalimeve me algoritmin MD5 \u00ebsht\u00eb hequr (p\u00ebr rikthim, lejohet lidhja me biblioteka t\u00eb jashtme si libxcrypt).\n<li class=\"l\"> N\u00eb ssh, sshd, ssh-add dhe ssh-agent \u00ebsht\u00eb realizuar nj\u00eb n\u00ebnsihtem\u00eb p\u00ebr t\u00eb kufizuar d\u00ebbimin dhe p\u00ebrdorimin e \u00e7el\u00ebsave t\u00eb shtuar n\u00eb ssh-agent. N\u00ebnsihtema lejon t\u00eb p\u00ebrcaktoni rregulla q\u00eb p\u00ebrcaktojn\u00eb si dhe ku mund t\u00eb p\u00ebrdoren \u00e7el\u00ebsat n\u00eb ssh-agent. P\u00ebr shembull, p\u00ebr t\u00eb shtuar nj\u00eb \u00e7el\u00ebs q\u00eb mund t\u00eb p\u00ebrdoret vet\u00ebm p\u00ebr autentifikim kur lidh \u00e7do p\u00ebrdorues me hostin scylla.example.org, p\u00ebrdoruesit perseus me hostin cetus.example.org dhe p\u00ebrdoruesin medea me hostin charybdis.example.org me ridrejtimin p\u00ebrmes hostit nd\u00ebrmjet scylla.example.org, mund t\u00eb p\u00ebrdorni komand\u00ebn e m\u00ebposhtme:        $ ssh-add -h &#171;perseus@cetus.example.org&#187; &#092;            -h &#171;scylla.example.org&#187; &#092;            -h &#171;scylla.example.org&gt;medea@charybdis.example.org&#187; &#092;            ~\/.ssh\/id_ed25519\n<li class=\"l\"> N\u00eb ssh dhe sshd, n\u00eb list\u00ebn KexAlgorithms, q\u00eb p\u00ebrcakton rendin e zgjedhjes s\u00eb metodave t\u00eb shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave, \u00ebsht\u00eb shtuar me default algoritmi hibrid &#171;sntrup761x25519-sha512@openssh.com&#187; (ECDH\/x25519 + NTRU Prime), i q\u00ebndruesh\u00ebm ndaj p\u00ebrpjekjeve n\u00eb kompjuter\u00ebt kuantik. N\u00eb versionin OpenSSH 8.9, ky metod negociimi \u00ebsht\u00eb shtuar midis metodave ECDH dhe DH, por n\u00eb l\u00ebshimin e ardhsh\u00ebm planifikohet t\u00eb aktivizohet me default.\n<li class=\"l\"> N\u00eb ssh-keygen, ssh dhe ssh-agent \u00ebsht\u00eb p\u00ebrmir\u00ebsuar p\u00ebrpunimi i \u00e7el\u00ebsave t\u00eb FIDO-token\u00ebve, t\u00eb p\u00ebrdorur p\u00ebr verifikimin e pajisjeve, duke p\u00ebrfshir\u00eb \u00e7el\u00ebsat p\u00ebr autentikimin biometrik.\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb shtuar komand\u00eb &#171;ssh-keygen -Y match-principals&#187; p\u00ebr t\u00eb verifikuar emrat e p\u00ebrdoruesve n\u00eb skedarin me list\u00ebn e emrave t\u00eb lejuar.\n<li class=\"l\"> N\u00eb ssh-add dhe ssh-agent \u00ebsht\u00eb mund\u00ebsuar dodhja n\u00eb ssh-agent e \u00e7el\u00ebsave FIDO t\u00eb mbrojtur me PIN (k\u00ebrkesa p\u00ebr PIN shfaqet n\u00eb momentin e autentikimit).\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb lejuar zgjedhja e algoritmit t\u00eb shenjestrimit (sha512 ose sha256) gjat\u00eb formimit t\u00eb n\u00ebnshkrimit.\n<li class=\"l\"> N\u00eb ssh dhe sshd p\u00ebr t\u00eb rritur performanc\u00ebn \u00ebsht\u00eb siguruar leximi i t\u00eb dh\u00ebnave rrjet\u00ebrore direkt n\u00eb bllokun e paketave p\u00ebr t\u00eb ardhura, duke anashkaluar tamponimin p\u00ebrmes nj\u00eb nd\u00ebrmjet\u00ebsimi n\u00eb stiv\u00eb. N\u00eb t\u00eb nj\u00ebjt\u00ebn m\u00ebnyr\u00eb \u00ebsht\u00eb realizuar vendosja direkte e t\u00eb dh\u00ebnave t\u00eb pranuara n\u00eb tamponin e kanalit.\n<li class=\"l\"> N\u00eb ssh, direktiva PubkeyAuthentication ka zgjeruar list\u00ebn e parametrave t\u00eb mb\u00ebshtetur (po|jo|pa kufi|e lidhur me hostin) p\u00ebr t\u00eb ofruar mund\u00ebsin\u00eb e zgjedhjes s\u00eb variantit t\u00eb zgjerimit t\u00eb protokollit t\u00eb p\u00ebrdorur.      <\/ul>\n<p>N\u00eb nj\u00eb nga botimet e ardhshme \u00ebsht\u00eb planifikuar q\u00eb utilitarin scp ta kaloj\u00eb n\u00eb p\u00ebrdorimin e SFTP si protokollin e parazgjedhur, p\u00ebrve\u00e7 protokollit t\u00eb vjet\u00ebr SCP\/RCP. SFTP p\u00ebrdor metoda m\u00eb t\u00eb parashikueshme p\u00ebr trajtimin e emrave dhe nuk p\u00ebrdor trajtimin e glob-\u015fablon\u00ebve n\u00eb emrat e skedar\u00ebve p\u00ebrmes shell-it n\u00eb an\u00ebn e hostit tjet\u00ebr, duke shkaktuar probleme me sigurin\u00eb. N\u00eb ve\u00e7anti, kur p\u00ebrdoret SCP dhe RCP, serveri merr vendimin se cilat skedar\u00eb dhe katalog\u00eb t'i d\u00ebrgoj\u00eb klientit, nd\u00ebrsa klienti vet\u00ebm kontrollon sakt\u00ebsin\u00eb e emrave t\u00eb objektit q\u00eb iu kthyen, gj\u00eb q\u00eb n\u00eb rastin e munges\u00ebs s\u00eb verifikimeve t\u00eb duhura n\u00eb an\u00ebn e klientit lejon <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-shicago\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2906\">server<\/a> shk\u00ebmbeni emra t\u00eb tjer\u00eb skedari q\u00eb ndryshojn\u00eb nga ata t\u00eb k\u00ebrkuar. Protokolli SFTP \u00ebsht\u00eb i lir\u00eb nga problemet e p\u00ebrmendura, por nuk mb\u00ebshtet zb\u00ebrthimin e rrug\u00ebve speciale, t\u00eb tilla si &#171;~\/&#187;. P\u00ebr t\u00eb eliminuar k\u00ebt\u00eb dallim, n\u00eb l\u00ebshimin e kaluar t\u00eb OpenSSH u propozua nj\u00eb zgjatje e re e protokollit SFTP p\u00ebr zb\u00ebrthimin e rrug\u00ebve ~\/ dhe ~user\/.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56751\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.9, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 sshd \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435. \u0412 \u0442\u0435\u043a\u0443\u0449\u0435\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103424","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.9, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 sshd \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435. \u0412 \u0442\u0435\u043a\u0443\u0449\u0435\u043c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/reliz-openssh-8-9-s-ustraneniem-uyazvimosti-v-sshd\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.9 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 sshd | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.9, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 sshd \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435. \u0412 \u0442\u0435\u043a\u0443\u0449\u0435\u043c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/reliz-openssh-8-9-s-ustraneniem-uyazvimosti-v-sshd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-02-24T13:36:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-02-24T13:36:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47L\u00ebshimi OpenSSH 8.9 me eliminimin e dob\u00ebsis\u00eb n\u00eb sshd | ProHoster","description":"Pas gjasht\u00eb muajve zhvillimi, \u00ebsht\u00eb prezantuar l\u00ebshimi OpenSSH 8.9, nj\u00eb implementim t\u00eb hapur t\u00eb klientit dhe serverit p\u00ebr pun\u00eb me protokollet SSH 2.0 dhe SFTP. N\u00eb versionin e ri, sshd ka eliminuar nj\u00eb dob\u00ebsi q\u00eb potencialisht lejon qasje pa autentifikim. Problemi shkaktohet nga mbivendosja e numrave n\u00eb kodin e autentifikimit, por shfryt\u00ebzimi \u00ebsht\u00eb i mundur vet\u00ebm n\u00eb kombinim me gabime t\u00eb tjera logjike n\u00eb kod. N\u00eb aktualen","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/reliz-openssh-8-9-s-ustraneniem-uyazvimosti-v-sshd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.9 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 sshd | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.9, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0432 sshd \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435. \u0412 \u0442\u0435\u043a\u0443\u0449\u0435\u043c","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/reliz-openssh-8-9-s-ustraneniem-uyazvimosti-v-sshd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-02-24T13:36:49+00:00","article:modified_time":"2022-02-24T13:36:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103424","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-02-24 13:37:31","updated":"2026-02-09 21:42:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=103424"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103424\/revisions"}],"predecessor-version":[{"id":160186,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/103424\/revisions\/160186"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=103424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=103424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=103424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}