ื‘ืึทืคืขืจ ืึธื•ื•ื•ืขืจืคืœืึธื• ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ืœื™ื‘ืฉ

ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2-2) ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ ืœื™ื‘ืฉ ื‘ื™ื‘ืœื™ืึธื˜ืขืง (ื ื™ื˜ ืฆื• ื–ื™ื™ืŸ ืฆืขืžื™ืฉื˜ ืžื™ื˜ ืœื™ื‘ืฉืงืกื ื•ืžืงืก), ื“ื™ื–ื™ื™ื ื“ ืฆื• ืœื™ื™ื’ืŸ ืงืœื™ืขื ื˜ ืื•ืŸ ืกืขืจื•ื•ืขืจ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ SSHv2021 ืคึผืจืึธื˜ืึธืงืึธืœ ืฆื• C ืžื’ื™ืœื”, ื•ื•ืึธืก ืคื™ืจืŸ ืฆื• ืึท ื‘ืึทืคืขืจ ืึธื•ื•ื•ืขืจืคืœืึธื• ื•ื•ืขืŸ ื™ื ื™ืฉื™ื™ื™ื˜ื™ื“ ื“ื™ ืจื™ืงื™ื™ ืคึผืจืึธืฆืขืก ื ื™ืฆืŸ ื“ื™ ืฉืœื™ืกืœ ื•ื•ืขืงืกืœ ื•ื•ืึธืก ื ื™ืฆื˜ ืึท ืึทื ื“ืขืจืฉ ื›ืึทืฉื™ื ื’ ืึทืœื’ืขืจื™ื“ืึทื. ื“ื™ ืึทืจื•ื™ืกื’ืขื‘ืŸ ืื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ืžืขืœื“ื•ื ื’ 3634.

ื“ื™ ืขืกืึทื ืก ืคื•ืŸ ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ืึทื– ื“ืขืจ ืฉืœื™ืกืœ ื˜ื•ื™ืฉืŸ ืึธืคึผืขืจืึทืฆื™ืข ืึทืœืึทื•ื– ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ื”ืึทืฉืขืก ืžื™ื˜ ืึท ื•ื•ืึทืจืคืŸ ื’ืจื™ื™ืก ื•ื•ืึธืก ืื™ื– ืึทื ื“ืขืจืฉ ืคื•ืŸ ื“ื™ ืขืจื™ื“ื–ืฉื ืึทืœื™ ื’ืขื•ื•ื™ื™ื ื˜ ืึทืœื’ืขืจื™ื“ืึทื. ืื™ืŸ ื“ืขื ืคืึทืœ, ื–ื™ืงืึธืจืŸ ืคึฟืึทืจ ื“ื™ ื”ืึทืฉ ืื™ืŸ ืœื™ื‘ืฉ ืื™ื– ืึทืœืึทืงื™ื™ื˜ื™ื“ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ืขืจ ืึธืจื™ื’ื™ื ืขืœ ื”ืึทืฉ ื’ืจื™ื™ืก, ืื•ืŸ ื ื™ืฆืŸ ืึท ื’ืจืขืกืขืจืข ื”ืึทืฉ ื’ืจื™ื™ืก ืคื™ืจื˜ ืฆื• ื“ืึทื˜ืŸ ืึธื•ื•ื•ืขืจืจื™ื˜ืึทืŸ ื•ื•ื™ื™ึทื˜ืขืจ ืคื•ืŸ ื“ื™ ืึทืœืึทืงื™ื™ื˜ื™ื“ ื‘ืึทืคืขืจ ื’ืจืขื ืขืฅ. ื•ื•ื™ ืึท ืคืึทืœื‘ืึทืงืง ื–ื™ื›ืขืจื”ื™ื™ื˜ ืื•ืคึฟืŸ, ืื™ืจ ืงืขื ืขืŸ ื‘ืึทื’ืจืขื ืขืฆืŸ ื“ื™ ืจืฉื™ืžื” ืคื•ืŸ ืฉื˜ื™ืฆื˜ ืฉืœื™ืกืœ ื•ื•ืขืงืกืœ ืžืขื˜ื”ืึธื“ืก ืฆื• ื‘ืœื•ื™ื– ืึทืœื’ืขืจื™ื“ืึทืžื– ืžื™ื˜ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื”ืึทืฉ ื’ืจื™ื™ืก. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืฆื• ื‘ื™ื ื“ืŸ ืฆื• SHA256, ืื™ืจ ืงืขื ืขืŸ ืœื™ื™ื’ืŸ ืฆื• ื“ื™ ืงืึธื“: rc = ssh_options_set(s->ssh.session, SSH_OPTIONS_KEY_EXCHANGE, "diffie-hellman-group14-sha256,curve25519-sha256,ecdh-sha2-nistp256");

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’