{"id":38754,"date":"2019-10-31T22:25:45","date_gmt":"2019-10-31T19:25:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/reliz-openssh-8-1\/"},"modified":"2019-10-31T22:25:45","modified_gmt":"2019-10-31T19:25:45","slug":"reliz-openssh-8-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/reliz-openssh-8-1","title":{"rendered":"Sl\u00e4pp av OpenSSH 8.1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Efter sex m\u00e5naders utveckling <noindex><a rel=\"nofollow\" href=\"http:\/\/lists.mindrot.org\/pipermail\/openssh-unix-dev\/2019-October\/037966.html\">presenteras<\/a><\/noindex> utgivning <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openssh.com\/\">OpenSSH 8.1<\/a><\/noindex>, en \u00f6ppen implementation av klient och server f\u00f6r arbete med protokollen SSH 2.0 och SFTP. <\/p>\n<p>I det nya numret f\u00f6rtj\u00e4nar \u00e5tg\u00e4rden av s\u00e5rbarheten som ber\u00f6r ssh, sshd, ssh-add och ssh-keygen s\u00e4rskild uppm\u00e4rksamhet. Problemet finns i koden f\u00f6r parsning av privata nycklar av typen XMSS och till\u00e5ter en angripare att initiera ett heltals\u00f6verskott. S\u00e5rbarheten har m\u00e4rkts som exploaterad men i praktiken s\u00e4llan nyttjad, eftersom st\u00f6det f\u00f6r XMSS-nycklar \u00e4r en experimentell funktion som \u00e4r avst\u00e4ngd som standard (i den b\u00e4rbara versionen ing\u00e5r det inte ens en byggalternativ i autoconf f\u00f6r att aktivera XMSS).<\/p>\n<p>Huvudsakliga f\u00f6r\u00e4ndringar: <\/p>\n<ul>\n<li class=\"l\"> i ssh, sshd och ssh-agent <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50929\">tillagd<\/a><\/noindex> kod som f\u00f6rhindrar \u00e5terst\u00e4llning av privat nyckel som finns i minnet genom attacker via sidokanaler, s\u00e5dana som <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47856\">Spectre, Meltdown<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=41340\">RowHammer<\/a><\/noindex> och <noindex><a rel=\"nofollow\" href=\"https:\/\/rambleed.com\/\">RAMBleed<\/a><\/noindex>. Privata nycklar krypteras nu n\u00e4r de laddas in i minnet och dekrypteras endast vid anv\u00e4ndning, vilket g\u00f6r att de f\u00f6rblir krypterade i \u00f6vrigt. Med detta tillv\u00e4gag\u00e5ngss\u00e4tt kr\u00e4vs det f\u00f6r att en angripare ska lyckas \u00e5terst\u00e4lla den privata nyckeln att f\u00f6rst \u00e5terst\u00e4lla den slumpm\u00e4ssigt genererade tempor\u00e4ra nyckeln p\u00e5 16 KB som anv\u00e4nds f\u00f6r att kryptera huvudnyckeln, vilket \u00e4r osannolikt givet den h\u00f6ga frekvensen av \u00e5terst\u00e4llningsfel vid moderna attacker;\n<li class=\"l\"> I  <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/ssh-keygen.1\">ssh-keygen<\/a><\/noindex>  experimentellt st\u00f6d har lagts till f\u00f6r en f\u00f6renklad schema f\u00f6r skapande och verifiering av digitala signaturer. Digitala signaturer kan skapas med hj\u00e4lp av vanliga SSH-nycklar som lagras p\u00e5 disk eller i ssh-agent, och verifieras med hj\u00e4lp av en lista liknande authorized_keys <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/ssh-keygen.1#ALLOWED_SIGNERS\">till\u00e5tna nycklar<\/a><\/noindex>. Den digitala signaturen inkluderar information om namnomr\u00e5det f\u00f6r att undvika f\u00f6rvirring vid till\u00e4mpning i olika dom\u00e4ner (till exempel f\u00f6r e-post och filer);\n<li class=\"l\"> ssh-keygen har standardinst\u00e4llningar f\u00f6r att anv\u00e4nda rsa-sha2-512-algoritmen vid signering av certifikat med RSA-nyckel (n\u00e4r man arbetar i CA-l\u00e4ge). S\u00e5dana certifikat \u00e4r inte kompatibla med versioner f\u00f6re OpenSSH 7.2 (f\u00f6r att s\u00e4kerst\u00e4lla kompatibilitet b\u00f6r algoritmtypens st\u00e4llas om, till exempel genom att anropa \"ssh-keygen -t ssh-rsa -s ...\");\n<li class=\"l\"> I ssh-\u00e4r uttrycket ProxyCommand implementerat f\u00f6r att st\u00f6dja substitution av \"%n\" (v\u00e4rdnamnet som anges i adressf\u00e4ltet);\n<li class=\"l\"> I algoritmlistorna f\u00f6r ssh och sshd kan symbolen \"^\" nu anv\u00e4ndas f\u00f6r att infoga f\u00f6reslagna standardalgoritmer. Till exempel, f\u00f6r att l\u00e4gga till ssh-ed25519 till standardlistan kan man ange \"HostKeyAlgorithms ^ssh-ed25519\";\n<li class=\"l\"> I ssh-keygen har m\u00f6jligheten att visa den kommentar som \u00e4r kopplad till nyckeln vid extrahering av den offentliga nyckeln fr\u00e5n den privata lagts till;\n<li class=\"l\"> I ssh-keygen har en m\u00f6jlighet lagts till att anv\u00e4nda flaggan \"-v\" vid s\u00f6koperationer (till exempel \"ssh-keygen -vF host\"), vilket resulterar i att en tydlig signatur av v\u00e4rden skrivs ut;\n<li class=\"l\"> M\u00f6jligheten att anv\u00e4nda <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/PKCS_8\">PKCS8<\/a><\/noindex> som ett alternativt format f\u00f6r att lagra privata nycklar p\u00e5 disk. Som standard anv\u00e4nds fortfarande PEM-formatet, men PKCS8 kan vara anv\u00e4ndbart f\u00f6r att uppn\u00e5 kompatibilitet med tredjepartsapplikationer.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>K\u00e4lla: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51640\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.1, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ssh, sshd, ssh-add \u0438 ssh-keygen. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043a\u043e\u0434\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0441 \u0442\u0438\u043f\u043e\u043c XMSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38754","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/news\/reliz-openssh-8-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/news\/reliz-openssh-8-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:25:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:25:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Release OpenSSH 8.1 | ProHoster","description":"Efter sex m\u00e5naders utveckling presenteras releasen","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/reliz-openssh-8-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.1 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/reliz-openssh-8-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:45+00:00","article:modified_time":"2019-10-31T19:25:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38754","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:17:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:04:29","updated":"2026-01-23 23:17:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=38754"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38754\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=38754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=38754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=38754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}