{"id":1340,"date":"2026-08-11T14:00:00","date_gmt":"2026-08-11T14:00:00","guid":{"rendered":"https:\/\/netguide.io\/news\/2026\/08\/11\/openssh-10-5-schliesst-luecken-schnellerer-release-zyklus\/"},"modified":"2026-08-17T23:09:50","modified_gmt":"2026-08-17T23:09:50","slug":"openssh-10-5-schliesst-luecken-schnellerer-release-zyklus","status":"publish","type":"post","link":"https:\/\/netguide.io\/news\/de\/2026\/08\/11\/openssh-10-5-schliesst-luecken-schnellerer-release-zyklus\/","title":{"rendered":"OpenSSH 10.5 schlie\u00dft L\u00fccken \u2013 schnellerer Zyklus"},"content":{"rendered":"<div id=\"netgu-2322491922\" class=\"netgu-before-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"3494115342\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p class=\"wp-block-paragraph\"><strong>Das OpenSSH-Projekt hat am 11. August 2026 Version 10.5 ver\u00f6ffentlicht \u2013 nur rund f\u00fcnf Wochen nach 10.4. Der Grund f\u00fcr den kurzen Abstand: drei behobene Sicherheitsprobleme und ein bewusst beschleunigter Release-Rhythmus als Antwort auf KI-gest\u00fctzt entdeckte Schwachstellen.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Die drei Sicherheitskorrekturen<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>ssh-agent-Sperre umgehbar:<\/strong> Bei gesperrtem Agent wurden Binding-Anfragen abgelehnt, wodurch eigentlich nur lokal gedachte Operationen \u00fcber einen weitergeleiteten Agent aus der Ferne ausf\u00fchrbar waren (Zusammenspiel mit der <code>session-bind@openssh.com<\/code>-Erweiterung).<\/li>\n\n\n\n<li><strong>Use-after-free im Client:<\/strong> Der SSH-Client behebt eine m\u00f6gliche realloc-Use-after-free-Situation.<\/li>\n\n\n\n<li><strong>restrict greift jetzt auch f\u00fcr Tunnel:<\/strong> Das Schl\u00fcsselwort <code>restrict<\/code> in <code>authorized_keys<\/code> wirkt nun korrekt auch auf Tunnel-Forwarding.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Neue Funktionen<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Neben den Korrekturen bringt 10.5 praktische Verbesserungen: Der neue Schalter <code>ssh -Z<\/code> zeigt an, welche \u00f6ffentlichen Schl\u00fcssel der Client in welcher Reihenfolge zur Authentifizierung anbieten w\u00fcrde. Bei FIDO-Hardwareschl\u00fcsseln lassen sich die Flags f\u00fcr \u201eBer\u00fchrung erforderlich&#8221; und \u201eVerifizierung erforderlich&#8221; nun per <code>ssh-keygen<\/code> verwalten, und Schl\u00fcssel mit Anwesenheitspr\u00fcfung werden bevorzugt zuerst probiert.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">KI treibt den Release-Takt<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Bemerkenswert ist die Begr\u00fcndung des Teams: Man habe F\u00e4lle beobachtet, in denen zun\u00e4chst mit KI-Werkzeugen gefundene Schwachstellen kurz darauf unabh\u00e4ngig auch von anderen Sicherheitsforschern entdeckt wurden. Um solchen L\u00fccken zuvorzukommen, will OpenSSH k\u00fcnftig h\u00e4ufiger und bei Bedarf au\u00dferplanm\u00e4\u00dfig ver\u00f6ffentlichen. Wer OpenSSH einsetzt, sollte zeitnah aktualisieren.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Quellen: <a href=\"https:\/\/linuxiac.com\/openssh-10-5-fixes-security-flaws-as-project-responds-to-ai-assisted-bug-discovery\/\" target=\"_blank\" rel=\"noopener\">Linuxiac<\/a>, <a href=\"https:\/\/www.openssh.org\/releasenotes.html\" target=\"_blank\" rel=\"noopener\">OpenSSH Release Notes<\/a>.<\/em><\/p>\n<div id=\"netgu-2941782432\" class=\"netgu-after-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"4559785002\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>OpenSSH 10.5 erscheint f\u00fcnf Wochen nach 10.4 und behebt drei Sicherheitsprobleme. Das Team reagiert damit auf KI-gest\u00fctzt gefundene Schwachstellen.<\/p>\n","protected":false},"author":1,"featured_media":1485,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[],"tags":[],"class_list":["post-1340","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/1340","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/comments?post=1340"}],"version-history":[{"count":1,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/1340\/revisions"}],"predecessor-version":[{"id":1486,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/1340\/revisions\/1486"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media\/1485"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media?parent=1340"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/categories?post=1340"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/tags?post=1340"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}