ืื ืืขืืืื ื ืคืื OpenSSH 9.2 ืืื ืืจืืืก, ืึทื ืึธืคึฟื ืืืคึผืืึทืืขื ืืืืฉืึทื ืคืื ืึท ืงืืืขื ื ืืื ืกืขืจืืืขืจ ืคึฟืึทืจ ืืจืืขืื ืืื ืื SSH 2.0 ืืื SFTP ืคึผืจืึธืืึธืงืึธืืก. ืื ื ืืึทืข ืืืขืจืกืืข ืืืืืึทื ืืืฅ ืึท ืืืึทืื ืขืจืึทืืืืืื ืืืึธืก ืคืืจื ืฆื ืืึธืคึผื ืคืจืื ืคืื ืืึผืจืื ืืื ืื ืคืึทืจ-ืึธืืขื ืืึทืงืืืฉืึทื ืืื ืข. ืืืืื ืื OpenSSH 9.1 ืืขืืืื ื ืืื ืึทืคืขืงืืึทื; ืื ืคึผืจืึธืืืขื ืงืขื ื ืืฉื ืืขืจืฉืืึทื ืขื ืืื ืคืจืืขืจ ืืืขืจืกืืขืก.
ืฆื ืฉืึทืคึฟื ืื ืึธืื ืคึฟืึทืจ ืื ืืึทื ืึทืคืขืกืืืืฉืึทื ืคืื ืืืึทืื ืขืจืึทืืืืืื, ืขืก ืืื ืืขื ืื ืฆื ืืืืฉื ืื SSH ืงืืืขื ื ืคืึธื ืฆื "SSH-2.0-FuTTYSH_9.1p1" ืฆื ืฉืืขืื ืื ืคืืึทืืก "SSH_BUG_CURVE25519PAD" ืืื "SSH_OLD_DHGEX", ืืืึธืก ืึธืคืขื ืืขื ืืืืฃ ืื ืืืขืจืกืืข ืคืื โโืื SSH. ืงืืืขื ื. ื ืึธื ืืึทืฉืืขืืืงื ืื ืคืืึทืืก, ืื ืืืงืึธืจื ืคึฟืึทืจ ืื "ืึธืคึผืฆืืขืก.ืงืขืงืก_ืึทืืืึธืจืืืืก" ืืึทืคืขืจ ืืื ืืืคืจืืื ืฆืืืื ืืึธื - ืืืขื ืขืงืกืึทืงืืืืื ื ืื do_ssh2_kex () ืคึฟืื ืงืฆืืข, ืืืึธืก ืจืืคื compat_kex_proposal (), ืืื ืืืขื ืขืงืกืึทืงืืืืื ื ืื do_authentication2 () ืคึฟืื ืงืฆืืข, ืืืึธืก ืจืืคื input_userauth_request (), mm_getpwna. ), copy_set_server_options () ืฆืืืืืขื ืื ืงืืื , assemble_algorithms () ืืื kex_assemble_names ().
ืฉืืคื ืึท ืืจืืขืื ืขืงืกืคึผืืืืืืืฉืึทื ืคึฟืึทืจ ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ืึทื ืืืืงืื, ืืืืึทื ืื ืขืงืกืคึผืืืืืืืฉืึทื ืคึผืจืึธืฆืขืก ืืื ืฆื ืงืึธืืคึผืืืฆืืจื - ืืึธืืขืจื ืืึผืจืื ืึทืืึทืงืืืฉืึทื ืืืืืจืขืจืื ืฆืืฉืืขืื ืฉืืฅ ืงืขืื ืืึธืคึผื ืคืจืื ืคืื ืืึผืจืื, ืืื ืืขืจ ืคืึทืจ-ืึทืืื ืคึผืจืึธืฆืขืก ืืื ืืืึธืก ืืขืจ ืืขืืช ืืื ืคืึธืจืฉืืขืื ืืืืคื ืืื ืจืืืืกื ืคึผืจืืืืืืึทืืืฉืึทื ืืื ืึทื ืืคืืขืืื ืืขืจืืงืืื. ืืึทืืืงืึทืกืื ืกืืืืืืข.
ืืื ืึทืืืฉืึทื ืฆื ืื ืืืืขืจืงื ืืืึทืื ืขืจืึทืืืืืื, ืื ื ืืึทืข ืืขืืืื ื ืืืื ืคืืงืกืื ืฆืืืื ืืขืจ ืืืืขืจืืืื ืืฉืื:
- ื ืืขืืช ืืื ืคืืจืืขืงืืืขื ืืืขื ืคึผืจืึทืกืขืกืื ื ืื "ืคึผืขืจืืืืจืขืืึธืืขืึธืคึผืขื" ืืึทืฉืืขืืืงื, ืืืึธืก ืืขืจ ืขืจืฉืืขืจ ืึทืจืืืืขื ื ืืื ืืืื ืึธืจืืจื ืืืื ืขืก ืืื ืึทื ืืขืจืฉ ืคืื ืื ืืืึทืืืขืก "ืงืืื" ืืื "ืงืืื". ืืขืจ ืคึผืจืึธืืืขื ืืื ืืจืืืก ืืื ืืืขืจืกืืขืก ื ืืึทืขืจ ืืื OpenSSH 8.7 ืืื ื ืื ืืฉืขืง ืืื ืกืงืืคึผื ืืืขื ืืืืื ืืืื ืืขืจืืืืืขื ืืฉ ืืื ืกืคึผืขืกืืคืืขื.
- ืึท ืึทืืึทืงืขืจ ืงืึทื ืืจืึธืืืื ื ืื ืื ืก ืกืขืจืืืขืจ ืืขื ืืฆื ืฆื ืืึทืฉืืืกื ื ืขืืขื ืงืขื ืขื ืืขืจืืจืืืื ืื ืกืึทืืกืืืืืฉืึทื ืคืื ืกืคึผืขืฆืืขืืข ืืืชืืืช (ืืืฉื, "*") ืืื ืืืงืื ื_ืืึธืกืืก ืืขืงืขืก ืืืื ืื ืงืึทื ืึธื ืืงืึทืืืืข ืืึธืกืื ืึทืืข ืืื CanonicalizePermittedCNAMEs ืึธืคึผืฆืืขืก ืืขื ืขื ืขื ืืืืึทืื ืืื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื, ืืื ืื ืกืืกืืขื ืจืขืกืึธืืืืขืจ ืงืขื ื ืืฉื ืงืึธื ืืจืึธืืืจื ืื ืจืืืืืง ืคืื ืจืขืกืคึผืึธื ืกืขืก ืคืื ืื ืื ืก ืกืขืจืืืขืจ. ืื ืืึทืคืึทืื ืืื ืืขืืืืื ืึทื ืืืืงืื ืืืืึทื ืื ืืืืืขืงืขืจื ื ืขืืขื ืืืื ืืืืึทืื ืื ืืืืื ืืื ืืขื ืกืคึผืขืกืืคืืขื ืืืจื CanonicalizePermittedCNAMEs.
ืื ืืขืจืข ืขื ืืขืจืื ืืขื:
- ืึทื EnableEscapeCommandline ืืึทืฉืืขืืืงื ืืื ืฆืืืขืืืืื ืฆื ssh_config ืคึฟืึทืจ ssh ืฆื ืงืึธื ืืจืึธืืืจื ืฆื ืืขืจ ืงืืืขื ื-ืืืึทื ืคึผืจืึทืกืขืกืื ื ืคืื ืื "~ C" ืึทื ืืืืืคื ืกืืงืืืึทื ืก ืืืึธืก ืืื ืื ืืึทืคึฟืขืื ืฉืืจื ืืื ืขื ืืืืึทืื. ืืืจื ืคืขืืืงืืึทื, "~ C" ืืึทื ืืืื ื ืืื ืืืฆื ืคืึทืจืงืจืืคึผืื ืฆื ื ืืฆื ืืืืืขืจ ืืึทืืืงืึทืกืื ืืคืืขืืื ืืขืจืืงืืื, ืคึผืึทืืขื ืืฉืึทืื ืืจืืืงืื ื ืกืืกืืขืืขื ืืืึธืก ื ืืฆื "~ C" ืคึฟืึทืจ ืคึผืึธืจื ืคืึธืจืืืขืจืืื ื ืืื ืจืื ืืืืข.
- ืื ChannelTimeout ืืืจืขืงืืืื ืืื ืฆืืืขืืืืื ืฆื sshd_config ืคึฟืึทืจ sshd ืฆื ืฉืืขืื ืื ืงืึทื ืึทื ืื ืึทืงืืืืืืื ืืืืืึทืื (ืืฉืึทื ืึทืื ืืื ืืืึธืก ืงืืื ืคืึทืจืงืขืจ ืืื ืจืขืงืึธืจืืขื ืคึฟืึทืจ ืื ืฆืืื ืกืคึผืขืกืืคืืขื ืืื ืื ืืืจืขืงืืืื ืืืขื ืืืื ืืืืืึธืืึทืืืฉ ืคืืจืืืื). ืคืึทืจืฉืืืขื ืข ืืืืืึทืืฅ ืงืขื ืขื ืืืื ืืึทืฉืืืื ืคึฟืึทืจ ืกืขืกืืข, X11, ืึทืืขื ื ืืื ืคืึทืจืงืขืจ ืจืืืขืจืขืงืฉืึทื.
- ืื ืืืจืขืงืืืื ืคืื UnusedConnectionTimeout ืืื ืฆืืืขืืืืื ืฆื sshd_config ืคึฟืึทืจ sshd, ืึทืืึทืืื ื ืืืจ ืฆื ืฉืืขืื ืึท ืืืืืึทืื ืคึฟืึทืจ ืืขืจืืึทื ืืืืื ื ืงืืืขื ื ืงืึทื ืขืงืฉืึทื ื ืืืึธืก ืืึธืื ืฉืืื ืึธื ืึทืงืืืื ืืฉืึทื ืึทืื ืคึฟืึทืจ ืึท ืืืืขืจ ืฆืืื.
- ืื "-V" ืึธืคึผืฆืืข ืืื ืฆืืืขืืืืื ืฆื sshd ืฆื ืืืืึทืื ืื ืืืขืจืกืืข, ืขื ืืขื ืฆื ืื ืขื ืืขื ืึธืคึผืฆืืข ืืื ืื ssh ืงืืืขื ื.
- ืฆืืืขืืขืื ืื ืฉืืจื "ืืึธืกื" ืฆื ืืขืจ ืจืขืืืืืึทื ืคืื "ืฉืฉ -ื", ืืืึธืก ืจืขืคืืขืงืฅ ืื ืืืขืจื ืคืื ืื ืืึธืกืื ืึทืืข ืึทืจืืืืขื ื.
- ืื "-X" ืึธืคึผืฆืืข ืืื ืฆืืืขืืืืื ืฆื ืกืงืคึผ ืืื ืกืคืืคึผ ืฆื ืงืึธื ืืจืึธืืืจื SFTP ืคึผืจืึธืืึธืงืึธื ืคึผืึทืจืึทืืขืืขืจืก ืึทืืึท ืืื ืื ืืจืืืก ืคืื ืื ืงืึธืคึผืืข ืืึทืคืขืจ ืืื ืื ื ืืืขืจ ืคืื ืคึผืขื ืืื ื ืจืืงืืืขืก.
- ssh-keyscan ืึทืืึทืื ืกืงืึทื ืื ื ืคืื ืคืื ืกืืืจ ืึทืืจืขืก ืจืืื ืืืฉืึทื, ืืืฉื "ssh-keyscan 192.168.0.0/24".
ืืงืืจ: opennet.ru