{"id":182869,"date":"2026-08-12T04:54:03","date_gmt":"2026-08-12T02:54:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openssh-10-5"},"modified":"2026-08-12T04:54:03","modified_gmt":"2026-08-12T02:54:03","slug":"vypusk-openssh-10-5","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-openssh-10-5","title":{"rendered":"D\u00ebshmi e OpenSSH 10.5","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Rrezultoi publikimi i OpenSSH 10.5, implementimi t\u00eb hapur t\u00eb klientit dhe serverit p\u00ebr t\u00eb punuar me protokollet SSH 2.0 dhe SFTP. Ndryshimet kryesore: <\/p>\n
\n
P\u00ebr t\u00eb punuar me versionin e portativ t\u00eb OpenSSH, tani k\u00ebrkohet mb\u00ebshtetje p\u00ebr kriptografin\u00eb e bazuar n\u00eb kurba eliptike (ECC - Elliptic Curve Cryptography) n\u00eb bibliotek\u00ebn libcrypto, duke p\u00ebrfshir\u00eb mb\u00ebshtetje p\u00ebr kurb\u00ebn eliptike NISTP521. N\u00eb zbatimet e libcrypto nga projektet LibreSSL, OpenSSL, BoringSSL dhe AWS LC, nj\u00eb mb\u00ebshtetje e till\u00eb \u00ebsht\u00eb e p\u00ebrfshir\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar.\n
N\u00eb utilitarin ssh-keygen, kur ndryshohet fjal\u00ebkalimi p\u00ebr \u00e7el\u00ebsat privat\u00eb p\u00ebr token\u00ebt FIDO, \u00ebsht\u00eb implementuar nj\u00eb sistem p\u00ebr t\u00eb vendosur flamujt touch-required dhe verify-required, t\u00eb cil\u00ebt k\u00ebrkojn\u00eb konfirmim nga p\u00ebrdoruesi.\n
N\u00eb utilitarin ssh \u00ebsht\u00eb ndryshuar rendi i aplikimit t\u00eb certifikatave gjat\u00eb autentifikimit me \u00e7el\u00ebsa publik\u00eb - tani n\u00eb radh\u00eb t\u00eb par\u00eb aplikohen \u00e7el\u00ebsat FIDO, t\u00eb cil\u00ebt nuk k\u00ebrkojn\u00eb veprime nga ana e p\u00ebrdoruesit, nd\u00ebrsa n\u00eb fund aplikohen \u00e7el\u00ebsat q\u00eb k\u00ebrkojn\u00eb verifikim me kod PIN ose biometrik.\n
\u00cbsht\u00eb shtuar komanda \u00abssh -Z user\u00bb, e cila shfaq \u00e7el\u00ebsat n\u00eb rendin e p\u00ebrdorimit t\u00eb tyre p\u00ebr autentifikimin me \u00e7el\u00ebsa publik\u00eb.\n
Jan\u00eb eliminuar problemet e siguris\u00eb:\n
\n
\u00cbsht\u00eb korrigjuar trajtimi i gabuar i k\u00ebrkesave p\u00ebr lidhjen e sesionit n\u00eb rastin e bllokimit t\u00eb SSH Agent, i cili b\u00ebnte q\u00eb n\u00eb vend t\u00eb refuzimit t\u00eb aksesit, SSH Agent lejonte t\u00eb kryheshin operacione nga distanca, t\u00eb cilat duhet t\u00eb ishin t\u00eb aksesueshme vet\u00ebm lokalish, si\u00e7 jan\u00eb shtimi i token\u00ebve PKCS#11 dhe p\u00ebrdorimi i \u00e7el\u00ebsave t\u00eb lidhur me konfigurimet p\u00ebr server\u00eb t\u00eb caktuar.\n
N\u00eb klientin ssh \u00ebsht\u00eb eliminuar nj\u00eb potencial p\u00ebr t\u00eb aksesuar memorien pas lirimit t\u00eb saj (use-after-free), e cila shfaqej gjat\u00eb shum\u00ebp\u00ebrdorimit t\u00eb lidhjeve SSH p\u00ebrmes nj\u00eb soketi n\u00eb rastin e shtimit t\u00eb nj\u00eb kalimi t\u00eb ri t\u00eb porteve n\u00eb momentin kur klienti ende po priste p\u00ebrgjigjen nga serveri p\u00ebr hapjen e kalimit t\u00eb m\u00ebparsh\u00ebm.\n
N\u00eb sshd \u00ebsht\u00eb arritur nj\u00eb zbatim i sakt\u00eb i kufizimeve, t\u00eb caktuara p\u00ebrmes flamurit \u00abrestrict\u00bb n\u00eb skedarin authorized_keys, p\u00ebr tunelat e ridrejtimit. <\/ul>\n<\/ul>\n