{"id":182869,"date":"2026-08-12T04:54:03","date_gmt":"2026-08-12T02:54:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openssh-10-5"},"modified":"2026-08-12T04:54:03","modified_gmt":"2026-08-12T02:54:03","slug":"vypusk-openssh-10-5","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-openssh-10-5","title":{"rendered":"Dalja e OpenSSH 10.5","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb publikuar versioni OpenSSH 10.5, nj\u00eb zbatim t\u00eb hapur t\u00eb klientit dhe serverit p\u00ebr funksionimin me protokollet SSH 2.0 dhe SFTP. Ndryshimet kryesore: <\/p>\n
\n
P\u00ebr versionin portativ t\u00eb OpenSSH tashm\u00eb k\u00ebrkohet mb\u00ebshtetje p\u00ebr kriptografin\u00eb e bazuar n\u00eb kurba eliptike (ECC \u2014 Elliptic Curve Cryptography) n\u00eb bibliotek\u00ebn libcrypto, duke p\u00ebrfshir\u00eb mb\u00ebshtetje p\u00ebr kurb\u00ebn eliptike NISTP521. N\u00eb implementimet e libcrypto nga projektet LibreSSL, OpenSSL, BoringSSL dhe AWS LC, kjo mb\u00ebshtetje \u00ebsht\u00eb p\u00ebrfshir\u00eb si standard.\n
N\u00eb utilitarin ssh-keygen, gjat\u00eb rivendosjes s\u00eb fjal\u00ebkalimeve p\u00ebr \u00e7elsat privat\u00eb p\u00ebr token\u00ebt FIDO, \u00ebsht\u00eb realizuar vendosja e flamujve touch-required dhe verify-required, t\u00eb cilat k\u00ebrkojn\u00eb konfirmimin nga p\u00ebrdoruesi.\n
N\u00eb utilitarin ssh \u00ebsht\u00eb ndryshuar rendi i aplikimit t\u00eb sertifikatave gjat\u00eb autentikimit me \u00e7el\u00ebsa publik\u00eb \u2014 tani, n\u00eb radh\u00eb t\u00eb par\u00eb aplikohen \u00e7el\u00ebsat FIDO, t\u00eb cil\u00ebt nuk k\u00ebrkojn\u00eb veprime nga ana e p\u00ebrdoruesit, nd\u00ebrsa n\u00eb vend t\u00eb fundit jan\u00eb \u00e7el\u00ebsat q\u00eb k\u00ebrkojn\u00eb verifikim p\u00ebrmes PIN-it ose biometrikave.\n
\u00cbsht\u00eb shtuar komanda \u00abssh -Z user\u00bb, e cila shfaq \u00e7el\u00ebsat n\u00eb rendin e p\u00ebrdorimit t\u00eb tyre p\u00ebr autentikimin me \u00e7el\u00ebsa publik\u00eb.\n
Jan\u00eb eliminuar problemet e siguris\u00eb:\n
\n
\u00cbsht\u00eb korrigjuar trajtimi i pap\u00ebrshtatsh\u00ebm i k\u00ebrkesave p\u00ebr lidhjen e sesioneve kur \u00ebsht\u00eb bllokuar SSH Agent, duke \u00e7uar n\u00eb at\u00eb q\u00eb n\u00eb vend t\u00eb refuzimit t\u00eb aksesit, SSH Agent lejonte t\u00eb kryheshin operacione n\u00eb distanc\u00eb q\u00eb duhet t\u00eb ishin t\u00eb disponueshme vet\u00ebm lokal, si shtimi i token\u00ebve PKCS#11 dhe p\u00ebrdorimi i \u00e7el\u00ebsave q\u00eb ishin lidhur n\u00eb konfigurime me server\u00eb t\u00eb caktuar.\n
N\u00eb klientin ssh \u00ebsht\u00eb eliminuar nj\u00eb qasje e mundshme n\u00eb kujtes\u00eb pas lirimit t\u00eb saj (use-after-free), q\u00eb manifestohej gjat\u00eb multipleximit t\u00eb lidhjeve SSH p\u00ebrmes nj\u00eb soketi n\u00eb rastin e shtimit t\u00eb nj\u00eb porti t\u00eb ri n\u00eb momentin q\u00eb klienti ende po priste nga server\u00eb<\/a> p\u00ebrgjigjen p\u00ebr hapjen e portit t\u00eb m\u00ebparsh\u00ebm.\n