{"id":170353,"date":"2026-05-04T12:24:42","date_gmt":"2026-05-04T10:24:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej"},"modified":"2026-05-04T12:24:42","modified_gmt":"2026-05-04T10:24:42","slug":"vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej","title":{"rendered":"\u00c7lirim i Dropbear SSH 2026.90 me eliminimin e dob\u00ebsive.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ishulli i projektit Dropbear 2026.90 \u00ebsht\u00eb publikuar, i cili zhvillon serverin dhe klientin SSH, i p\u00ebrhapur n\u00eb routerat pa kab\u00ebll dhe distribuimet kompakte, si OpenWrt. Dropbear karakterizohet nga konsum t\u00eb ul\u00ebt t\u00eb memories, mund\u00ebsia p\u00ebr t\u00eb \u00e7aktivizuar funksionalitetet e panevojshme gjat\u00eb faz\u00ebs s\u00eb nd\u00ebrtimit dhe mb\u00ebshtetje p\u00ebr nd\u00ebrtimin e klientit dhe serverit n\u00eb nj\u00eb skedar ekzekutiv, ngjash\u00ebm me busybox. N\u00eb lidhje statike me uClibc, skedari ekzekutiv Dropbear z\u00eb vet\u00ebm 110kB. Dropbear mb\u00ebshtet ridrejtimin X11, \u00ebsht\u00eb n\u00eb p\u00ebrputhje me skedarin e \u00e7elsave OpenSSH (~\/.ssh\/authorized_keys) dhe mund t\u00eb krijoj\u00eb multi-lidhje me kalim p\u00ebrmes nj\u00eb hosti transit. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C dhe shp\u00ebrndahet n\u00ebn nj\u00eb licenc\u00eb t\u00eb ngjashme me MIT.      <\/p>\n<p>N\u00eb versionin e ri jan\u00eb rregulluar disa probleme t\u00eb siguris\u00eb:  <\/p>\n<ul>\n<li class=\"l\"> P\u00ebrfundimi i paplot\u00eb i nj\u00eb dobie n\u00eb scp (CVE-2019-6111), e cila lejon q\u00eb t\u00eb mbivendosen skedar\u00eb t\u00eb tjer\u00eb gjat\u00eb lidhjes me nj\u00eb sistem t\u00eb infektuar. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-shicago\/\" title=\"serverit\" data-wpil-keyword-link=\"linked\">serverit<\/a>. N\u00eb p\u00ebrdorimin e scp <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/\"   title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a> vendos vendimin se cilat skedar\u00eb dhe katalog\u00eb t\u00eb d\u00ebrgohen te klienti, nd\u00ebrsa klienti vet\u00ebm kontrollon sakt\u00ebsin\u00eb e emrave t\u00eb objekteve t\u00eb kthyer. Kontrolli n\u00eb an\u00ebn e klientit bllokon daljen jasht\u00eb katalogut aktual (\"..\/\"), por n\u00eb rastin e kopjimit rekursiv (-r) nuk merr parasysh rastet e d\u00ebrgimit t\u00eb katalog\u00ebve me emra q\u00eb ndryshojn\u00eb nga ato fillimisht t\u00eb k\u00ebrkuara. Problemi \u00ebsht\u00eb zgjidhur duke ndaluar p\u00ebrdorimin e opsionit \"-r\" me nj\u00eb katalog t\u00eb synuar ekzistues.\n<li class=\"l\"> Nj\u00eb dobi (CVE-2026-35385) n\u00eb utilitarin scp, p\u00ebr shkak t\u00eb s\u00eb cil\u00ebs, pas shkarkimit t\u00eb nj\u00eb skedari me t\u00eb drejta root duke p\u00ebrdorur opsionin \"-O\" dhe pa opsionin \"-p\", nuk pastruan flamujt setuid\/setgid.\n<li class=\"l\"> Mund\u00ebsia p\u00ebr t\u00eb anashkaluar ekzekutimin e komand\u00ebs \"forced_command\" n\u00eb konfigurimet authorized_keys gjat\u00eb lidhjes s\u00eb nj\u00eb p\u00ebrdoruesi t\u00eb autentikuar duke p\u00ebrdorur opsionin \"-t\" (hyrja me verifikimin e fjal\u00ebkalimit dhe \u00e7el\u00ebsit publik).\n<li class=\"l\"> Refuzimi i sh\u00ebrbimit p\u00ebrmes krijimit t\u00eb nj\u00eb skedari t\u00eb ve\u00e7ant\u00eb nga nj\u00eb p\u00ebrdorues lokal me emrin authorized_keys, duke bllokuar operacionet e leximit.\n<li class=\"l\"> Leximi i t\u00eb dh\u00ebnave nga nj\u00eb zon\u00eb jasht\u00eb tamponit gjat\u00eb krijimit t\u00eb menaxher\u00ebve t\u00eb ridrejtimit p\u00ebr k\u00ebrkesat e klient\u00ebve dhe server\u00ebve, q\u00eb mund t\u00eb \u00e7oj\u00eb n\u00eb mbylljen e deskriptor\u00ebve t\u00eb rast\u00ebsish\u00ebm t\u00eb skedar\u00ebve.    <\/ul>\n<p>Ndryshime q\u00eb nuk lidhen me sigurin\u00eb:  <\/p>\n<ul>\n<li class=\"l\"> N\u00eb ssh \u00ebsht\u00eb shtuar opsioni \"-R\" p\u00ebr kalimin e unix-sockets p\u00ebrmes SSH-tunelit.\n<li class=\"l\"> N\u00eb ssd \u00ebsht\u00eb shtuar opsioni \"-M\" p\u00ebr t\u00eb kufizuar p\u00ebrkoh\u00ebsin\u00eb maksimale t\u00eb seanc\u00ebs.\n<li class=\"l\"> N\u00eb &#171;authorized_keys&#187; \u00ebsht\u00eb shtuar opsioni &#171;permitlisten&#187; p\u00ebr t\u00eb kufizuar portet e lejuara.\n<li class=\"l\"> Kjo \u00ebsht\u00eb nd\u00ebrprer\u00eb mb\u00ebshtetje p\u00ebr \u00e7el\u00ebsat RSA, t\u00eb krijuar n\u00eb dropbearkey 0.32 ose versionet m\u00eb her\u00ebt t\u00eb k\u00ebsaj utilite, t\u00eb ndjesh\u00ebm ndaj sulmeve p\u00ebrmes kanaleve an\u00ebsore, q\u00eb vler\u00ebsojn\u00eb diferenc\u00ebn n\u00eb koh\u00ebn e p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave, t\u00eb cilat hyn\u00eb dhe nuk hyn\u00eb n\u00eb cache.\n<li class=\"l\"> P\u00ebr t\u00eb bllokuar nd\u00ebrhyrjet e \u00e7el\u00ebsave t\u00eb hapur n\u00eb hostet, numri i k\u00ebrkesave p\u00ebr \u00e7el\u00ebsat e hapur \u00ebsht\u00eb i kufizuar n\u00eb 15 p\u00ebrpjekje p\u00ebr \u00e7do seanc\u00eb.        <\/ul>\n<p>Burimi: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65356\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Dropbear 2026.90, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442 SSH, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 OpenWrt. Dropbear \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043d\u0438\u0437\u043a\u0438\u043c \u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u043f\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0438 \u0441 busybox. \u041f\u0440\u0438 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u043d\u0438\u0438 \u0441 uClibc \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b Dropbear \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170353","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Dropbear 2026.90, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442 SSH, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 OpenWrt.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Dropbear SSH 2026.90 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Dropbear 2026.90, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442 SSH, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 OpenWrt.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-04T10:24:42+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-04T10:24:42+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lan\u00e7imi i Dropbear SSH 2026.90 me rregullimin e dob\u00ebsive | ProHoster","description":"\u00cbsht\u00eb publikuar numri i projektit Dropbear 2026.90, q\u00eb zhvillon serverin dhe klientin SSH, i cili \u00ebsht\u00eb shp\u00ebrndar\u00eb n\u00eb router\u00ebt wireless dhe distribucione t\u00eb kompaktuara si OpenWrt.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Dropbear SSH 2026.90 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Dropbear 2026.90, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442 SSH, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0438 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 OpenWrt.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-dropbear-ssh-2026-90-s-ustraneniem-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-04T10:24:42+00:00","article:modified_time":"2026-05-04T10:24:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=170353"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170353\/revisions"}],"predecessor-version":[{"id":173160,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/170353\/revisions\/173160"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=170353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=170353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=170353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}