{"id":182500,"date":"2026-07-07T04:53:59","date_gmt":"2026-07-07T02:54:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-openssh-10-4"},"modified":"2026-07-07T04:53:59","modified_gmt":"2026-07-07T02:54:00","slug":"dostupen-openssh-10-4","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/dostupen-openssh-10-4","title":{"rendered":"OpenSSH 10.4 \u00ebsht\u00eb i disponuesh\u00ebm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Pas tre muajve t\u00eb zhvillimit, \u00ebsht\u00eb publikuar versioni OpenSSH 10.4, nj\u00eb implementim t\u00eb hapur t\u00eb klientit dhe serverit p\u00ebr funksionimin me protokollet SSH 2.0 dhe SFTP. Ndryshimet kryesore: <\/p>\n
\n
Shto \u00ebsht\u00eb shtuar mb\u00ebshtetje eksperimentale p\u00ebr skem\u00ebn e kombinuar t\u00eb krijimit t\u00eb n\u00ebnshkrimeve digjitale 'mldsa44-ed25519', e cila kombinon algoritmin post-kvant ML-DSA 44 me algoritmin bazuar n\u00eb kurba eliptike Ed25519. P\u00ebr t\u00eb aktivizuar mb\u00ebshtetje, duhet t\u00eb shtoni 'mldsa44-ed25519' n\u00eb direktivat HostKeyAlgorithms dhe PubkeyAcceptedAlgorithms. P\u00ebr gjenerimin e \u00e7el\u00ebsave, mund t\u00eb p\u00ebrdorni komand\u00ebn 'ssh-keygen -t mldsa44-ed25519'.\n
N\u00eb ssh dhe sshd ka nj\u00eb implementim t\u00eb ri t\u00eb sistemit t\u00eb p\u00ebrputhjes me modelin, i bazuar n\u00eb automatin fundor t\u00eb paedukuar dhe q\u00eb nuk p\u00ebrballet me problemin e rritjes eksponenciale t\u00eb kompleksitetit t\u00eb llogaritjeve kur p\u00ebrdoren maska q\u00eb p\u00ebrmbajn\u00eb shum\u00eb simbole '*'.\n
Sjellja e kompilimeve Linux t\u00eb sshd me filtrimin e thirrjeve sistemike p\u00ebrmes seccomp \u00ebsht\u00eb ndryshuar. M\u00eb par\u00eb, d\u00ebshtimi gjat\u00eb aktivizimit t\u00eb SECCOMP ose NO_NEW_PRIVS n\u00eb sistemet Linux pa mb\u00ebshtetje p\u00ebr to shkaktonte regjistrimin e nj\u00eb paralajm\u00ebrimi n\u00eb log dhe vazhdimin e funksionimit pa izolim, nd\u00ebrsa tani do t\u00eb shkaktoj\u00eb nj\u00eb p\u00ebrfundim t\u00eb papritur.\n
Kur p\u00ebrdoret opsioni 'sshd -G', skema e konfigurimit tani regjistrohet me shkronja t\u00eb m\u00ebdha dhe t\u00eb vogla, n\u00eb vend q\u00eb t\u00eb p\u00ebrdoren vet\u00ebm shkronjat e vogla (p.sh. 'PubkeyAuthentication' n\u00eb vend t\u00eb 'pubkeyauthentication').\n
Sjellja e ssh dhe sshd \u00ebsht\u00eb p\u00ebrputhur me standardin RFC 4253: d\u00ebrgimi i mesazheve jo t\u00eb lidhura me shk\u00ebmbimin e \u00e7el\u00ebsave gjat\u00eb rifillimit t\u00eb k\u00ebtij shk\u00ebmbimi tani do t\u00eb rezultoj\u00eb n\u00eb p\u00ebrfundimin e lidhjes. M\u00eb par\u00eb, sulmuesit mund t\u00eb organizonin sulme DoS, duke d\u00ebrguar pafund\u00ebsisht mesazhe t\u00eb tjera gjat\u00eb shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave, q\u00eb akumuloheshin n\u00eb server<\/a> dhe konsumonin memorie. <\/ul>\n