{"id":112310,"date":"2023-12-19T03:10:31","date_gmt":"2023-12-19T01:10:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-9-6-c-ustraneniem-uyazvimostej"},"modified":"2023-12-19T03:10:31","modified_gmt":"2023-12-19T01:10:31","slug":"reliz-openssh-9-6-c-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/reliz-openssh-9-6-c-ustraneniem-uyazvimostej","title":{"rendered":"Publikohet OpenSSH 9.6 me rregullime t\u00eb dob\u00ebsive t\u00eb siguris\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb publikuar OpenSSH 9.6, nj\u00eb implementim i hapur i klientit dhe serverit p\u00ebr pun\u00eb me protokollet SSH 2.0 dhe SFTP. N\u00eb versionin e ri jan\u00eb eliminuar tre probleme sigurie: <\/p>\n
\n
Nj\u00eb vulnerabilitet n\u00eb protokollin SSH (CVE-2023-48795, sulmi \u201cTerrapin\u201d), q\u00eb lejon n\u00eb nj\u00eb sulm MITM t\u00eb rikthej\u00eb lidhjen n\u00eb p\u00ebrdorimin e algoritmeve m\u00eb pak t\u00eb sigurta p\u00ebr autentikimin dhe t\u00eb \u00e7aktivizoj\u00eb mbrojtjen nga sulmet p\u00ebrmes kanaleve an\u00ebsore, q\u00eb riprodhojn\u00eb hyrjen p\u00ebrmes analiz\u00ebs s\u00eb vonesave midis shtypjeve t\u00eb \u00e7el\u00ebsit n\u00eb tastier\u00eb. Metoda e sulmit \u00ebsht\u00eb paraqitur n\u00eb nj\u00eb lajm t\u00eb ve\u00e7ant\u00eb.\n
Nj\u00eb vulnerabilitet n\u00eb utilitarin ssh, q\u00eb lejon z\u00ebvend\u00ebsimin e komandave t\u00eb rastit shell p\u00ebrmes manipulimit me vlerat e emrit t\u00eb p\u00ebrdoruesit dhe hostit, q\u00eb p\u00ebrmbajn\u00eb simbole speciale. Vulnerabiliteti mund t\u00eb ekzekutohet n\u00ebse sulmuesi kontrollon vlerat e emrit t\u00eb p\u00ebrdoruesit dhe emrit t\u00eb hostit q\u00eb d\u00ebrgohen n\u00eb ssh, direktivat ProxyCommand dhe LocalCommand ose bloket \u201cmatch exec\u201d, n\u00eb t\u00eb cilat jan\u00eb p\u00ebrmendur simbole z\u00ebvend\u00ebsimi, si %u dhe %h. P\u00ebr shembull, emri i pavlefsh\u00ebm i p\u00ebrdoruesit dhe hostit mund t\u00eb z\u00ebvend\u00ebsohen n\u00eb sistemet q\u00eb p\u00ebrdorin submodule n\u00eb Git, pasi Git nuk ndalon specifikimin e simboleve speciale n\u00eb emrin e hostit dhe p\u00ebrdoruesit. Nj\u00eb vulnerabilitet i ngjash\u00ebm gjithashtu shfaqet n\u00eb libssh.\n
Gabim n\u00eb ssh-agent, p\u00ebr shkak t\u00eb t\u00eb cilit gjat\u00eb shtimit t\u00eb \u00e7el\u00ebsave privat\u00eb PKCS#11, kufizimet zbatoheshin vet\u00ebm p\u00ebr \u00e7el\u00ebsin e par\u00eb t\u00eb kthyer nga token-i PKCS#11. Problemi nuk prek \u00e7el\u00ebsat privat\u00eb t\u00eb zakonsh\u00ebm, token-\u00ebt FIDO dhe \u00e7el\u00ebsat e p\u00ebrcaktuar pa kufizime. <\/ul>\n
Ndryshimet e tjera: <\/p>\n
\n
N\u00eb ssh \u00ebsht\u00eb shtuar z\u00ebvend\u00ebsimi \u201c%j\u201d, q\u00eb shpaloset n\u00eb emrin e hostit, t\u00eb p\u00ebrmendur p\u00ebrmes direktiv\u00ebs ProxyJump.\n
N\u00eb ssh \u00ebsht\u00eb shtuar mb\u00ebshtetja p\u00ebr konfigurimin ChannelTimeout n\u00eb an\u00ebn e klientit, e cila mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb mbyllur kanalet joaktive.\n
N\u00eb ssh dhe sshd \u00ebsht\u00eb shtuar nj\u00eb zgjerim i protokollit p\u00ebr rinovimin e algoritmeve t\u00eb n\u00ebnshkrimit digjital p\u00ebr autentikimin me \u00e7el\u00ebsa publik\u00eb, q\u00eb realizohet n\u00eb faz\u00ebn pas marrjes s\u00eb t\u00eb dh\u00ebnave p\u00ebr emrin e p\u00ebrdoruesit. P\u00ebr shembull, p\u00ebrmes zgjerimit mund t\u00eb p\u00ebrdoren selektivisht algoritme t\u00eb tjera n\u00eb lidhje me p\u00ebrdoruesit p\u00ebrmes specifikimit t\u00eb PubkeyAcceptedAlgorithms n\u00eb bllokun \u201cMatch user\u201d.\n
Te ssh-add dhe ssh-agent \u00ebsht\u00eb shtuar nj\u00eb zgjerim i protokollit p\u00ebr caktimin e certifikatave gjat\u00eb ngarkimit t\u00eb \u00e7el\u00ebsave PKCS#11, \u00e7ka mund\u00ebson p\u00ebrdorimin e certifikatave t\u00eb lidhura me \u00e7el\u00ebsat privat\u00eb PKCS#11 n\u00eb t\u00eb gjitha mjetet OpenSSH q\u00eb mb\u00ebshtesin ssh-agent, dhe jo vet\u00ebm n\u00eb ssh.\n
P\u00ebrmir\u00ebsuar identifikimi i flamujve t\u00eb kompilatorit t\u00eb pa p\u00ebrkrahur ose t\u00eb paq\u00ebndruesh\u00ebm, si \u201c-fzero-call-used-regs\u201d n\u00eb clang.\n
P\u00ebr t\u00eb kufizuar privilegjet e procesit sshd n\u00eb versionet e OpenSolaris q\u00eb mb\u00ebshtesin nd\u00ebrfaqen getpflags(), \u00ebsht\u00eb aktivizuar m\u00ebnyra PRIV_XPOLICY n\u00eb vend t\u00eb PRIV_LIMIT. <\/ul>\n