{"id":32255,"date":"2025-10-19T14:40:53","date_gmt":"2025-10-19T11:40:53","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=32255"},"modified":"2025-10-19T14:40:53","modified_gmt":"2025-10-19T11:40:53","slug":"openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/","title":{"rendered":"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778’i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme"},"content":{"rendered":"

<\/p>\n

OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778’i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme<\/h2>\n

Giri\u015f<\/h2>\n

OpenSSH, g\u00fcn\u00fcm\u00fczde bilgisayar sistemleri aras\u0131nda g\u00fcvenli ve \u015fifreli ileti\u015fim kurman\u0131n en yayg\u0131n ve temel yollar\u0131ndan biridir. Sistem y\u00f6neticilerinden yaz\u0131l\u0131m geli\u015ftiricilerine kadar milyonlarca kullan\u0131c\u0131, uzaktan sunuculara eri\u015fmek, dosya transferi yapmak ve komutlar\u0131 g\u00fcvenli bir \u015fekilde \u00e7al\u0131\u015ft\u0131rmak i\u00e7in OpenSSH’e g\u00fcvenmektedir. Bu denli kritik bir altyap\u0131 bile\u015feni olmas\u0131, OpenSSH’teki herhangi bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131n geni\u015f \u00e7apl\u0131 ve ciddi sonu\u00e7lar do\u011furabilece\u011fi anlam\u0131na gelir.<\/p>\n

2016 y\u0131l\u0131n\u0131n ba\u015flar\u0131nda, OpenSSH istemcisinde CVE-2016-0777 ve CVE-2016-0778 olarak bilinen iki \u00f6nemli g\u00fcvenlik a\u00e7\u0131\u011f\u0131 tespit edildi. Bu a\u00e7\u0131klar, \u00f6zellikle OpenSSH’in “roaming” (dola\u015f\u0131m) ad\u0131 verilen ve genellikle g\u00f6zden ka\u00e7an bir \u00f6zelli\u011finden kaynaklanmaktayd\u0131. UseRoaming<\/code> \u00f6zelli\u011fi, mobil veya ge\u00e7ici a\u011f ba\u011flant\u0131lar\u0131 olan kullan\u0131c\u0131lar i\u00e7in SSH oturumlar\u0131n\u0131n kesintisiz devaml\u0131l\u0131\u011f\u0131n\u0131 sa\u011flamay\u0131 ama\u00e7lasa da, yanl\u0131\u015f yap\u0131land\u0131r\u0131lmas\u0131 veya yanl\u0131\u015f uygulanmas\u0131 durumunda hassas bilgilerin s\u0131zmas\u0131na ve hatta potansiyel olarak uzaktan kod y\u00fcr\u00fct\u00fclmesine yol a\u00e7abilecek ciddi zafiyetlere neden olmu\u015ftur.<\/p>\n

Bu makale, s\u00f6z konusu g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 detayl\u0131 bir \u015fekilde inceleyecek, nas\u0131l ortaya \u00e7\u0131kt\u0131klar\u0131n\u0131, potansiyel etkilerini ve en \u00f6nemlisi, bu riskleri ortadan kald\u0131rmak i\u00e7in UseRoaming<\/code> \u00f6zelli\u011fini devre d\u0131\u015f\u0131 b\u0131rakma ad\u0131mlar\u0131n\u0131 a\u00e7\u0131klayacakt\u0131r. Amac\u0131m\u0131z, OpenSSH kullan\u0131c\u0131lar\u0131n\u0131 bu kritik zafiyetler hakk\u0131nda bilgilendirmek ve sistemlerini g\u00fcvence alt\u0131na almalar\u0131 i\u00e7in pratik ve uygulanabilir \u00e7\u00f6z\u00fcmler sunmakt\u0131r.<\/p>\n

OpenSSH ve G\u00fcvenli \u0130leti\u015fimdeki Rol\u00fc<\/h2>\n

OpenSSH (Open Secure Shell), Unix benzeri i\u015fletim sistemleri i\u00e7in geli\u015ftirilmi\u015f, a\u011f \u00fczerindeki bilgisayarlar aras\u0131nda g\u00fcvenli veri ileti\u015fimi sa\u011flayan bir ara\u00e7 paketidir. Temel olarak SSH protokol\u00fcn\u00fc kullanarak, \u015fifrelenmi\u015f bir kanal \u00fczerinden uzaktan komut \u00e7al\u0131\u015ft\u0131rma, dosya transferi (SCP, SFTP) ve t\u00fcnelleme gibi i\u015flevler sunar. SSH’in en \u00f6nemli avantaj\u0131, a\u011f \u00fczerindeki trafi\u011fi \u015fifreleyerek dinlemeyi (eavesdropping), oturum ele ge\u00e7irmeyi (session hijacking) ve di\u011fer a\u011f tabanl\u0131 sald\u0131r\u0131lar\u0131 engellemesidir.<\/p>\n

OpenSSH, istemci (client) ve sunucu (server) olmak \u00fczere iki ana bile\u015fenden olu\u015fur. SSH sunucusu, gelen ba\u011flant\u0131 isteklerini dinlerken, SSH istemcisi bir sunucuya ba\u011flanmak i\u00e7in kullan\u0131l\u0131r. G\u00fcvenlik a\u00e7\u0131klar\u0131 genellikle her iki tarafta da ortaya \u00e7\u0131kabilir, ancak bu makalede ele al\u0131nan CVE-2016-0777 ve CVE-2016-0778, OpenSSH istemcisi<\/em> taraf\u0131ndaki zafiyetlerdir. Bu, sald\u0131rgan\u0131n hedefinin genellikle SSH ba\u011flant\u0131s\u0131n\u0131 ba\u015flatan kullan\u0131c\u0131 oldu\u011fu anlam\u0131na gelir.<\/p>\n

CVE-2016-0777 ve CVE-2016-0778 G\u00fcvenlik A\u00e7\u0131klar\u0131n\u0131n Detayl\u0131 \u0130ncelenmesi<\/h2>\n

Bu iki g\u00fcvenlik a\u00e7\u0131\u011f\u0131, OpenSSH istemcisinin 7.1p2 s\u00fcr\u00fcm\u00fcnden \u00f6nceki t\u00fcm s\u00fcr\u00fcmlerinde mevcuttu ve \u00f6zellikle UseRoaming<\/code> ad\u0131 verilen bir \u00f6zellikten kaynaklan\u0131yordu.<\/p>\n

UseRoaming \u00d6zelli\u011fi Nedir?<\/h3>\n

UseRoaming<\/code>, OpenSSH istemcisinde bulunan deneysel bir \u00f6zelliktir. Amac\u0131, a\u011f ba\u011flant\u0131s\u0131 kesildi\u011finde veya de\u011fi\u015fti\u011finde SSH oturumlar\u0131n\u0131n kesintiye u\u011framadan devam etmesini sa\u011flamakt\u0131r. \u00d6zellikle mobil cihazlar veya karars\u0131z a\u011f ba\u011flant\u0131lar\u0131na sahip kullan\u0131c\u0131lar i\u00e7in tasarlanm\u0131\u015ft\u0131r. UseRoaming<\/code> etkinle\u015ftirildi\u011finde, SSH istemcisi, ba\u011flant\u0131n\u0131n kesilmesi durumunda oturumu yeniden kurmak i\u00e7in belirli bir mekanizma kullan\u0131r. Bu \u00f6zellik, oturumun durumunu ve kimlik do\u011frulama bilgilerini (\u00f6rne\u011fin, anahtarlar\u0131) bellekte tutarak, kesilen ba\u011flant\u0131n\u0131n ard\u0131ndan h\u0131zl\u0131 bir \u015fekilde yeniden ba\u011flanmay\u0131 dener. Ancak, bu yeniden ba\u011flanma mekanizmas\u0131n\u0131n uygulan\u0131\u015f\u0131nda ciddi bir hata bulunuyordu.<\/p>\n

G\u00fcvenlik A\u00e7\u0131klar\u0131n\u0131n Mekanizmas\u0131<\/h3>\n

Sorun, UseRoaming<\/code> \u00f6zelli\u011finin etkin oldu\u011fu durumlarda, OpenSSH istemcisinin, yeniden ba\u011flanma denemesi s\u0131ras\u0131nda sunucuya “roaming” verilerini g\u00f6nderme bi\u00e7iminden kaynaklan\u0131yordu. Normalde, bu verilerin oturumun durumuyla ilgili olmas\u0131 beklenirken, istemci bazen bellekteki kontrols\u00fcz ve potansiyel olarak hassas verileri de bu roaming paketine dahil ediyordu.<\/p>\n

Daha teknik olarak, SSH istemcisi, ba\u011flant\u0131n\u0131n koptu\u011funu alg\u0131lad\u0131\u011f\u0131nda, “proxy” ad\u0131 verilen bir mekanizma arac\u0131l\u0131\u011f\u0131yla oturumu yeniden ba\u015flatmay\u0131 dener. UseRoaming<\/code> etkinse, istemci, yeniden ba\u011flanma s\u0131ras\u0131nda bir “roaming” paketi olu\u015fturur ve bu paketi sunucuya g\u00f6nderir. Bu paket, bir dizi \u00f6nbelle\u011fe al\u0131nm\u0131\u015f oturum verisini i\u00e7ermesi gereken bir bellek b\u00f6lgesinden kopyalan\u0131r. Ancak, bu bellek b\u00f6lgesinin boyutunun do\u011fru bir \u015fekilde y\u00f6netilmemesi veya i\u00e7eri\u011finin tamamen temizlenmemesi durumunda, \u00f6nceki oturumlardan veya i\u015fletim sisteminin belle\u011finden kalan hassas veriler (\u00f6rne\u011fin, \u00f6zel anahtarlar, \u015fifreler, di\u011fer oturum bilgileri) bu pakete dahil edilebilir.<\/p>\n

Sald\u0131rgan, bu zafiyetten faydalanmak i\u00e7in bir “ortadaki adam” (Man-in-the-Middle – MitM) konumunda olabilir veya k\u00f6t\u00fc niyetli bir SSH sunucusu kurabilir. K\u00f6t\u00fc niyetli sunucuya ba\u011flanan bir istemci, UseRoaming<\/code> etkinse, bu hassas verileri sald\u0131rgan\u0131n kontrol\u00fcndeki sunucuya s\u0131zd\u0131rabilir.<\/p>\n

CVE-2016-0777: Bilgi S\u0131z\u0131nt\u0131s\u0131 (Information Leak)<\/h3>\n

CVE-2016-0777, OpenSSH istemcisinde bir bilgi s\u0131z\u0131nt\u0131s\u0131 g\u00fcvenlik a\u00e7\u0131\u011f\u0131d\u0131r. UseRoaming<\/code> \u00f6zelli\u011finin etkinle\u015ftirilmesiyle tetiklenir. Bu a\u00e7\u0131k, SSH istemcisinin, bir proxy ba\u011flant\u0131s\u0131 \u00fczerinden “roaming” oturum durumunu yeniden ba\u015flatmaya \u00e7al\u0131\u015f\u0131rken, bellekteki kontrols\u00fcz verileri (uninitialized memory) uzak sunucuya g\u00f6ndermesine neden olur.<\/p>\n

S\u0131zan veriler \u015funlar\u0131 i\u00e7erebilir:
\n* \u00d6zel Anahtarlar:<\/strong> Kullan\u0131c\u0131n\u0131n SSH anahtar \u00e7iftinin \u00f6zel anahtar\u0131. Bu, sald\u0131rgan\u0131n kullan\u0131c\u0131n\u0131n kimli\u011fine b\u00fcr\u00fcnerek di\u011fer sunuculara eri\u015fmesine olanak tan\u0131r.
\n* \u015eifreler:<\/strong> E\u011fer istemci \u015fifre ile kimlik do\u011frulama yapm\u0131\u015fsa, bellekte kalan \u015fifre par\u00e7ac\u0131klar\u0131.
\n* Di\u011fer Hassas Oturum Verileri:<\/strong> Ge\u00e7mi\u015f SSH oturumlar\u0131na ait komutlar, dosya yollar\u0131, ortam de\u011fi\u015fkenleri gibi bilgiler.<\/p>\n

Bu bilgi s\u0131z\u0131nt\u0131s\u0131, istemcinin k\u00f6t\u00fc niyetli bir SSH sunucusuna ba\u011flanmas\u0131 veya bir MitM sald\u0131r\u0131s\u0131 alt\u0131nda olmas\u0131 durumunda ger\u00e7ekle\u015fir. Sald\u0131rgan, s\u0131zan verileri analiz ederek hedef sistemler \u00fczerinde daha fazla kontrol elde edebilir.<\/p>\n

CVE-2016-0778: Buffer Overflow (Bellek Ta\u015fmas\u0131)<\/h3>\n

CVE-2016-0778, OpenSSH istemcisinde bir bellek ta\u015fmas\u0131 (buffer overflow) g\u00fcvenlik a\u00e7\u0131\u011f\u0131d\u0131r. Bu a\u00e7\u0131k da UseRoaming<\/code> \u00f6zelli\u011finin etkinle\u015ftirilmesiyle ortaya \u00e7\u0131kar. G\u00fcvenlik a\u00e7\u0131\u011f\u0131, istemcinin bir “roaming” oturumunu yeniden ba\u015flatmaya \u00e7al\u0131\u015f\u0131rken, ayr\u0131lan bellek b\u00f6lgesinden daha fazla veri yazmaya \u00e7al\u0131\u015fmas\u0131yla tetiklenir.<\/p>\n

Bellek ta\u015fmas\u0131, program\u0131n \u00f6ng\u00f6r\u00fclemeyen davran\u0131\u015flar sergilemesine neden olabilir:
\n* Servis Reddi (DoS):<\/strong> \u0130stemci uygulamas\u0131n\u0131n \u00e7\u00f6kmesine yol a\u00e7arak kullan\u0131c\u0131n\u0131n SSH ba\u011flant\u0131s\u0131 kurmas\u0131n\u0131 engelleyebilir.
\n* Potansiyel Uzaktan Kod \u00c7al\u0131\u015ft\u0131rma:<\/strong> Daha geli\u015fmi\u015f senaryolarda, iyi haz\u0131rlanm\u0131\u015f bir bellek ta\u015fmas\u0131 sald\u0131r\u0131s\u0131, sald\u0131rgan\u0131n hedef sistemde rastgele kod y\u00fcr\u00fctmesine olanak tan\u0131yabilir. Bu, genellikle karma\u015f\u0131k bellek istismar\u0131 teknikleri gerektirse de, teorik olarak m\u00fcmk\u00fcnd\u00fcr ve en ciddi risklerden biridir.<\/p>\n

Bu a\u00e7\u0131k, \u00f6zellikle istemcinin bir proxy \u00fczerinden ba\u011flant\u0131 kurmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131 durumlarda daha belirgin hale gelir. K\u00f6t\u00fc niyetli bir proxy veya SSH sunucusu, istemciyi bu bellek ta\u015fmas\u0131n\u0131 tetikleyecek \u015fekilde manip\u00fcle edebilir.<\/p>\n

G\u00fcvenlik A\u00e7\u0131klar\u0131n\u0131n Etkileri ve Riskleri<\/h2>\n

CVE-2016-0777 ve CVE-2016-0778, OpenSSH istemcisinin kullan\u0131ld\u0131\u011f\u0131 her yerde potansiyel riskler ta\u015f\u0131r. Bu a\u00e7\u0131klar\u0131n ana etkileri \u015funlard\u0131r:<\/p>\n

Hassas Veri S\u0131z\u0131nt\u0131s\u0131<\/h3>\n

En do\u011frudan ve ciddi etki, kullan\u0131c\u0131n\u0131n \u00f6zel SSH anahtarlar\u0131, \u015fifreleri ve di\u011fer hassas oturum bilgilerinin s\u0131zd\u0131r\u0131lmas\u0131d\u0131r. \u00d6zel anahtarlar\u0131n ele ge\u00e7irilmesi, sald\u0131rgan\u0131n kullan\u0131c\u0131n\u0131n kimli\u011fine b\u00fcr\u00fcnerek eri\u015fimi olan t\u00fcm sunuculara yetkisiz eri\u015fim sa\u011flamas\u0131na yol a\u00e7abilir. Bu, hem bireysel kullan\u0131c\u0131lar hem de kurumsal a\u011flar i\u00e7in felaketle sonu\u00e7lanabilecek bir durumdur.<\/p>\n

Ortadaki Adam (Man-in-the-Middle – MitM) Sald\u0131r\u0131lar\u0131<\/h3>\n

Bu a\u00e7\u0131klar, MitM sald\u0131r\u0131lar\u0131 i\u00e7in bir vekt\u00f6r g\u00f6revi g\u00f6rebilir. Sald\u0131rgan, kullan\u0131c\u0131n\u0131n internet trafi\u011fini dinleyebildi\u011fi veya y\u00f6nlendirebildi\u011fi bir a\u011f ortam\u0131nda (\u00f6rne\u011fin, halka a\u00e7\u0131k Wi-Fi a\u011flar\u0131) k\u00f6t\u00fc niyetli bir SSH sunucusu veya proxy kurabilir. Kullan\u0131c\u0131 bu k\u00f6t\u00fc niyetli sunucuya ba\u011fland\u0131\u011f\u0131nda, istemci taraf\u0131ndaki zafiyetler tetiklenir ve hassas veriler sald\u0131rgana s\u0131zar.<\/p>\n

Servis Reddi (Denial of Service – DoS) ve Potansiyel Uzaktan Kod \u00c7al\u0131\u015ft\u0131rma<\/h3>\n

Bellek ta\u015fmas\u0131 zafiyeti (CVE-2016-0778), istemci uygulamas\u0131n\u0131n \u00e7\u00f6kmesine neden olarak DoS durumuna yol a\u00e7abilir. Bu, kullan\u0131c\u0131n\u0131n SSH ba\u011flant\u0131s\u0131 kurmas\u0131n\u0131 veya mevcut bir oturumu s\u00fcrd\u00fcrmesini engeller. Daha da \u00f6nemlisi, geli\u015fmi\u015f istismar teknikleriyle, bu bellek ta\u015fmas\u0131 uzaktan kod y\u00fcr\u00fctme (Remote Code Execution – RCE) i\u00e7in kullan\u0131labilir. RCE, sald\u0131rgan\u0131n hedef sistem \u00fczerinde tam kontrol sa\u011flamas\u0131 anlam\u0131na gelir ki bu, olas\u0131 en k\u00f6t\u00fc senaryodur.<\/p>\n

Etkilenen Sistemleri Tespit Etme<\/h2>\n

Bu g\u00fcvenlik a\u00e7\u0131klar\u0131ndan etkilenip etkilenmedi\u011finizi anlamak i\u00e7in iki ana kontrol yapman\u0131z gerekmektedir: OpenSSH istemci s\u00fcr\u00fcm\u00fcn\u00fcz\u00fc kontrol etmek ve UseRoaming<\/code> ayar\u0131n\u0131n durumunu denetlemek.<\/p>\n

OpenSSH \u0130stemci S\u00fcr\u00fcm\u00fcn\u00fc Kontrol Etme<\/h3>\n

CVE-2016-0777 ve CVE-2016-0778, OpenSSH istemcisinin 7.1p2 s\u00fcr\u00fcm\u00fcnden \u00f6nceki t\u00fcm s\u00fcr\u00fcmlerini etkilemektedir. G\u00fcvenlik a\u00e7\u0131klar\u0131, OpenSSH 7.1p2 ve 7.2 s\u00fcr\u00fcmlerinde d\u00fczeltilmi\u015ftir. \u0130stemci s\u00fcr\u00fcm\u00fcn\u00fcz\u00fc kontrol etmek i\u00e7in terminalde a\u015fa\u011f\u0131daki komutu kullanabilirsiniz:<\/p>\n

ssh -V<\/code><\/pre>\n
\u00c7\u0131kt\u0131 genellikle “OpenSSH_7.1p2” veya “OpenSSH_6.7p1” gibi bir formatta olacakt\u0131r. E\u011fer s\u00fcr\u00fcm numaran\u0131z 7.1p2’den k\u00fc\u00e7\u00fckse (\u00f6rne\u011fin, 7.1p1, 6.x, 5.x vb.), sisteminiz bu g\u00fcvenlik a\u00e7\u0131klar\u0131ndan etkilenme potansiyeli ta\u015f\u0131maktad\u0131r.<\/p>\n
UseRoaming Ayar\u0131n\u0131n Durumunu Kontrol Etme<\/h3>\n
Bu g\u00fcvenlik a\u00e7\u0131klar\u0131, yaln\u0131zca UseRoaming<\/code> \u00f6zelli\u011fi etkinle\u015ftirildi\u011finde tetiklenir. Varsay\u0131lan olarak, OpenSSH’in \u00e7o\u011fu da\u011f\u0131t\u0131m\u0131nda bu \u00f6zellik devre d\u0131\u015f\u0131d\u0131r. Ancak, baz\u0131 kullan\u0131c\u0131lar veya sistem y\u00f6neticileri bu \u00f6zelli\u011fi manuel olarak etkinle\u015ftirmi\u015f olabilirler. UseRoaming<\/code> ayar\u0131n\u0131n durumunu kontrol etmek i\u00e7in a\u015fa\u011f\u0131daki dosyalara bakman\u0131z gerekir:<\/p>\n
1.  Genel Sistem Yap\u0131land\u0131rmas\u0131:<\/strong> \/etc\/ssh\/ssh_config<\/code>
\n2.  Kullan\u0131c\u0131ya \u00d6zel Yap\u0131land\u0131rma:<\/strong> ~\/.ssh\/config<\/code><\/p>\n
Bu dosyalarda UseRoaming yes<\/code> sat\u0131r\u0131 olup olmad\u0131\u011f\u0131n\u0131 aray\u0131n. \u00d6rne\u011fin:<\/p>\n
grep -i \"UseRoaming\" \/etc\/ssh\/ssh_config ~\/.ssh\/config<\/code><\/pre>\n
E\u011fer bu komut UseRoaming yes<\/code> \u00e7\u0131kt\u0131s\u0131 veriyorsa, \u00f6zelli\u011finiz etkinle\u015ftirilmi\u015f demektir ve risk alt\u0131ndas\u0131n\u0131zd\u0131r. E\u011fer hi\u00e7bir \u00e7\u0131kt\u0131 almazsan\u0131z veya UseRoaming no<\/code> \u00e7\u0131kt\u0131s\u0131 al\u0131rsan\u0131z, varsay\u0131lan olarak devre d\u0131\u015f\u0131d\u0131r ve bu \u00f6zel zafiyetler a\u00e7\u0131s\u0131ndan g\u00fcvendesiniz demektir (ancak yine de OpenSSH’i g\u00fcncel tutman\u0131z \u00f6nerilir).<\/p>\n
\u00c7\u00f6z\u00fcm: UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakma<\/h2>\n
Bu g\u00fcvenlik a\u00e7\u0131klar\u0131ndan korunman\u0131n en acil ve etkili yolu, UseRoaming<\/code> \u00f6zelli\u011fini devre d\u0131\u015f\u0131 b\u0131rakmakt\u0131r. Bu i\u015flem, SSH istemcisinin yeniden ba\u011flanma mekanizmas\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakarak, hassas verilerin s\u0131zmas\u0131n\u0131 veya bellek ta\u015fmas\u0131n\u0131 \u00f6nler.<\/p>\n
Neden UseRoaming Devre D\u0131\u015f\u0131 B\u0131rak\u0131lmal\u0131?<\/h3>\n
UseRoaming<\/code> \u00f6zelli\u011fi, bir\u00e7ok kullan\u0131c\u0131 i\u00e7in pratik bir fayda sa\u011flamaz ve deneysel bir \u00f6zellik olarak kalm\u0131\u015ft\u0131r. \u00d6zellikle kararl\u0131 a\u011f ba\u011flant\u0131lar\u0131na sahip sistemlerde veya sunucularda \u00e7al\u0131\u015fanlar i\u00e7in gereksizdir. Bu \u00f6zelli\u011fi devre d\u0131\u015f\u0131 b\u0131rakmak, sistemin g\u00fcvenli\u011fini art\u0131r\u0131rken, SSH kullan\u0131m deneyiminde genellikle farkedilir bir olumsuz etki yaratmaz. A\u00e7\u0131klar\u0131n tetiklenmesi i\u00e7in UseRoaming<\/code>‘in etkin olmas\u0131 gerekti\u011finden, bu ayar\u0131 devre d\u0131\u015f\u0131 b\u0131rakmak, mevcut OpenSSH istemci s\u00fcr\u00fcm\u00fcn\u00fcz ne olursa olsun sizi bu \u00f6zel zafiyetlerden korur.<\/p>\n
UseRoaming’i Global Olarak Devre D\u0131\u015f\u0131 B\u0131rakma (\/etc\/ssh\/ssh_config)<\/h3>\n
Bu y\u00f6ntem, sistemdeki t\u00fcm kullan\u0131c\u0131lar i\u00e7in UseRoaming<\/code> \u00f6zelli\u011fini devre d\u0131\u015f\u0131 b\u0131rak\u0131r. Root yetkilerine sahip olman\u0131z gerekir.<\/p>\n
1.  Yap\u0131land\u0131rma dosyas\u0131n\u0131 a\u00e7\u0131n:<\/strong> Tercih etti\u011finiz bir metin d\u00fczenleyici ile \/etc\/ssh\/ssh_config<\/code> dosyas\u0131n\u0131 a\u00e7\u0131n (\u00f6rne\u011fin, sudo nano \/etc\/ssh\/ssh_config<\/code>).
\n2.  UseRoaming<\/code> sat\u0131r\u0131n\u0131 bulun veya ekleyin:<\/strong> Dosyada UseRoaming yes<\/code> sat\u0131r\u0131 varsa, bunu UseRoaming no<\/code> olarak de\u011fi\u015ftirin. E\u011fer bu sat\u0131r yoksa, dosyan\u0131n sonuna a\u015fa\u011f\u0131daki sat\u0131r\u0131 ekleyin:<\/p>\n
UseRoaming no<\/code><\/pre>\n
3.  Dosyay\u0131 kaydedin ve kapat\u0131n.<\/strong><\/p>\n
Bu de\u011fi\u015fiklikler, yeni ba\u015flat\u0131lan SSH istemci oturumlar\u0131 i\u00e7in ge\u00e7erli olacakt\u0131r.<\/p>\n
Kullan\u0131c\u0131 Baz\u0131nda UseRoaming’i Devre D\u0131\u015f\u0131 B\u0131rakma (~\/.ssh\/config)<\/h3>\n
Bu y\u00f6ntem, yaln\u0131zca belirli bir kullan\u0131c\u0131 i\u00e7in UseRoaming<\/code> \u00f6zelli\u011fini devre d\u0131\u015f\u0131 b\u0131rak\u0131r. E\u011fer \/etc\/ssh\/ssh_config<\/code> dosyas\u0131n\u0131 de\u011fi\u015ftirecek yetkiniz yoksa veya sadece kendi kullan\u0131c\u0131 hesab\u0131n\u0131z\u0131 etkilemek istiyorsan\u0131z bu y\u00f6ntemi kullanabilirsiniz.<\/p>\n
1.  Kullan\u0131c\u0131 yap\u0131land\u0131rma dosyas\u0131n\u0131 a\u00e7\u0131n:<\/strong> Ev dizininizdeki .ssh<\/code> klas\u00f6r\u00fcnde bulunan config<\/code> dosyas\u0131n\u0131 a\u00e7\u0131n (\u00f6rne\u011fin, nano ~\/.ssh\/config<\/code>). E\u011fer bu dosya veya .ssh<\/code> klas\u00f6r\u00fc yoksa, olu\u015fturman\u0131z gerekebilir:<\/p>\n
mkdir -p ~\/.ssh\n    touch ~\/.ssh\/config\n    chmod 700 ~\/.ssh\n    chmod 600 ~\/.ssh\/config<\/code><\/pre>\n
2.  UseRoaming<\/code> sat\u0131r\u0131n\u0131 bulun veya ekleyin:<\/strong> Dosyada UseRoaming yes<\/code> sat\u0131r\u0131 varsa, bunu UseRoaming no<\/code> olarak de\u011fi\u015ftirin. E\u011fer bu sat\u0131r yoksa, dosyan\u0131n sonuna a\u015fa\u011f\u0131daki sat\u0131r\u0131 ekleyin:<\/p>\n
Host *\n        UseRoaming no<\/code><\/pre>\n
    Host <\/code> sat\u0131r\u0131, bu ayar\u0131n t\u00fcm SSH ba\u011flant\u0131lar\u0131 i\u00e7in ge\u00e7erli olaca\u011f\u0131n\u0131 belirtir. Belirli bir host i\u00e7in devre d\u0131\u015f\u0131 b\u0131rakmak isterseniz, <\/em><\/code> yerine host ad\u0131n\u0131 veya IP adresini yazabilirsiniz.
\n3.  Dosyay\u0131 kaydedin ve kapat\u0131n.<\/strong><\/p>\n
Bu de\u011fi\u015fiklikler de yeni ba\u015flat\u0131lan SSH istemci oturumlar\u0131 i\u00e7in ge\u00e7erli olacakt\u0131r.<\/p>\n
Komut Sat\u0131r\u0131ndan Ge\u00e7ici Olarak Devre D\u0131\u015f\u0131 B\u0131rakma<\/h3>\n
E\u011fer sadece belirli bir SSH ba\u011flant\u0131s\u0131 i\u00e7in UseRoaming<\/code>‘i devre d\u0131\u015f\u0131 b\u0131rakmak isterseniz, ssh<\/code> komutuna -o<\/code> se\u00e7ene\u011fini ekleyerek bunu yapabilirsiniz:<\/p>\n
ssh -o UseRoaming=no user@remote_host<\/code><\/pre>\n
Bu y\u00f6ntem, yap\u0131land\u0131rma dosyalar\u0131n\u0131 kal\u0131c\u0131 olarak de\u011fi\u015ftirmek istemeyen veya h\u0131zl\u0131 bir test yapmak isteyen kullan\u0131c\u0131lar i\u00e7in kullan\u0131\u015fl\u0131d\u0131r. Ancak, kal\u0131c\u0131 bir \u00e7\u00f6z\u00fcm i\u00e7in yukar\u0131daki yap\u0131land\u0131rma dosyas\u0131 de\u011fi\u015fiklikleri \u00f6nerilir.<\/p>\n
Di\u011fer G\u00fcvenlik \u00d6nlemleri ve En \u0130yi Uygulamalar<\/h2>\n
UseRoaming<\/code>‘i devre d\u0131\u015f\u0131 b\u0131rakmak CVE-2016-0777 ve CVE-2016-0778 i\u00e7in do\u011frudan bir \u00e7\u00f6z\u00fcm olsa da, genel OpenSSH g\u00fcvenli\u011finizi art\u0131rmak i\u00e7in ba\u015fka \u00f6nlemler de almal\u0131s\u0131n\u0131z.<\/p>\n
OpenSSH Yaz\u0131l\u0131m\u0131n\u0131 G\u00fcncelleme<\/h3>\n
Bu g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n en kapsaml\u0131 ve kal\u0131c\u0131 \u00e7\u00f6z\u00fcm\u00fc, OpenSSH yaz\u0131l\u0131m\u0131n\u0131z\u0131 en son s\u00fcr\u00fcme g\u00fcncellemektir. OpenSSH 7.2 ve sonraki s\u00fcr\u00fcmler, bu zafiyetleri d\u00fczeltilmi\u015f olarak gelir. \u0130\u015fletim sisteminizin paket y\u00f6neticisini kullanarak d\u00fczenli g\u00fcncellemeler yapmak, yaln\u0131zca bu de\u011fil, gelecekteki di\u011fer g\u00fcvenlik a\u00e7\u0131klar\u0131ndan da korunman\u0131z\u0131 sa\u011flar.<\/p>\n
*   Debian\/Ubuntu:<\/strong> sudo apt update && sudo apt upgrade openssh-client<\/code>
\n*   CentOS\/RHEL:<\/strong> sudo yum update openssh-client<\/code> (veya sudo dnf update openssh-client<\/code> yeni s\u00fcr\u00fcmler i\u00e7in)
\n*   macOS (Homebrew ile):<\/strong> brew update && brew upgrade openssh<\/code><\/p>\n
G\u00fcncelleme sonras\u0131nda, ssh -V<\/code> komutu ile yeni s\u00fcr\u00fcm\u00fcn y\u00fcklendi\u011fini do\u011frulay\u0131n.<\/p>\n
G\u00fc\u00e7l\u00fc Kimlik Do\u011frulama Y\u00f6ntemleri Kullanma<\/h3>\n
Her zaman anahtar tabanl\u0131 kimlik do\u011frulamay\u0131 (public key authentication) kullanmay\u0131 tercih edin ve \u015fifre tabanl\u0131 kimlik do\u011frulamay\u0131 devre d\u0131\u015f\u0131 b\u0131rak\u0131n. Anahtar tabanl\u0131 kimlik do\u011frulama, \u015fifrelerin aksine kaba kuvvet sald\u0131r\u0131lar\u0131na kar\u015f\u0131 \u00e7ok daha diren\u00e7lidir. Ayr\u0131ca, SSH anahtarlar\u0131n\u0131z i\u00e7in g\u00fc\u00e7l\u00fc bir parola (passphrase) kullanmay\u0131 ve bu parolay\u0131 d\u00fczenli olarak de\u011fi\u015ftirmeyi unutmay\u0131n. M\u00fcmk\u00fcnse, iki fakt\u00f6rl\u00fc kimlik do\u011frulama (MFA) kullanarak ek bir g\u00fcvenlik katman\u0131 ekleyin.<\/p>\n
Eri\u015fim Kontrolleri ve Yetkilendirme<\/h3>\n
SSH eri\u015fimini yaln\u0131zca ger\u00e7ekten ihtiyac\u0131 olan kullan\u0131c\u0131lara ve IP adreslerine k\u0131s\u0131tlay\u0131n. sshd_config<\/code> dosyas\u0131ndaki AllowUsers<\/code>, AllowGroups<\/code>, DenyUsers<\/code>, DenyGroups<\/code> ve ListenAddress<\/code> gibi se\u00e7enekleri kullanarak eri\u015fimi daraltabilirsiniz. Ayr\u0131ca, root kullan\u0131c\u0131s\u0131n\u0131n do\u011frudan SSH eri\u015fimini devre d\u0131\u015f\u0131 b\u0131rakarak (PermitRootLogin no) ve bunun yerine normal bir kullan\u0131c\u0131 ile ba\u011flan\u0131p sudo<\/code> kullanmay\u0131 tercih ederek g\u00fcvenlik risklerini azalt\u0131n.<\/p>\n
G\u00fcvenlik Duvar\u0131 Kurallar\u0131<\/h3>\n
SSH sunucular\u0131n\u0131z\u0131n yaln\u0131zca belirli IP adreslerinden veya a\u011f segmentlerinden gelen ba\u011flant\u0131lar\u0131 kabul etmesini sa\u011flamak i\u00e7in g\u00fcvenlik duvar\u0131 kurallar\u0131 (iptables, firewalld, ufw) kullan\u0131n. Bu, potansiyel sald\u0131rganlar\u0131n sunucunuza eri\u015fim denemelerini b\u00fcy\u00fck \u00f6l\u00e7\u00fcde k\u0131s\u0131tlar.<\/p>\n
Sistem G\u00fcnl\u00fcklerini \u0130zleme<\/h3>\n
SSH sunucu ve istemci g\u00fcnl\u00fcklerini d\u00fczenli olarak izleyin. \/var\/log\/auth.log<\/code> (Debian\/Ubuntu) veya \/var\/log\/secure<\/code> (CentOS\/RHEL) gibi dosyalar, ba\u015far\u0131s\u0131z giri\u015f denemeleri, kimlik do\u011frulama hatalar\u0131 ve di\u011fer \u015f\u00fcpheli aktiviteler hakk\u0131nda de\u011ferli bilgiler sa\u011flar. Anormal aktiviteler i\u00e7in otomatik uyar\u0131lar kurmak, g\u00fcvenlik olaylar\u0131na h\u0131zl\u0131 tepki vermenizi sa\u011flar.<\/p>\n
Sonu\u00e7<\/h2>\n
OpenSSH istemcisindeki CVE-2016-0777 ve CVE-2016-0778 g\u00fcvenlik a\u00e7\u0131klar\u0131, UseRoaming<\/code> \u00f6zelli\u011finin yanl\u0131\u015f uygulanmas\u0131ndan kaynaklanan ciddi zafiyetlerdi. Bu a\u00e7\u0131klar, hassas bilgilerin s\u0131zmas\u0131na, servis reddine ve potansiyel olarak uzaktan kod y\u00fcr\u00fct\u00fclmesine yol a\u00e7abilirdi. Neyse ki, bu sorunlar\u0131n \u00e7\u00f6z\u00fcm\u00fc nispeten basittir: UseRoaming<\/code> \u00f6zelli\u011fini devre d\u0131\u015f\u0131 b\u0131rakmak veya OpenSSH istemcinizi g\u00fcncel bir s\u00fcr\u00fcme y\u00fckseltmek.<\/p>\n
Bu makalede a\u00e7\u0131klanan ad\u0131mlar\u0131 izleyerek, sistemlerinizi bu \u00f6zel zafiyetlerden koruyabilir ve OpenSSH kullan\u0131m\u0131n\u0131z\u0131 daha g\u00fcvenli hale getirebilirsiniz. Unutmay\u0131n ki siber g\u00fcvenlik s\u00fcrekli bir s\u00fcre\u00e7tir. Yaz\u0131l\u0131mlar\u0131n\u0131z\u0131 g\u00fcncel tutmak, g\u00fc\u00e7l\u00fc kimlik do\u011frulama y\u00f6ntemleri kullanmak ve sistemlerinizi d\u00fczenli olarak denetlemek, dijital varl\u0131klar\u0131n\u0131z\u0131 korumak i\u00e7in hayati \u00f6neme sahiptir. Proaktif bir g\u00fcvenlik yakla\u015f\u0131m\u0131 benimsemek, potansiyel tehditlere kar\u015f\u0131 en iyi savunmad\u0131r.
\n<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778’i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme\nGiri\u015f\nOpenSSH, g","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-32255","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nOpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778'i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778'i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme\" \/>\n<meta property=\"og:description\" content=\"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778'i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme Giri\u015f OpenSSH, g\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-19T11:40:53+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778’i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme\",\"datePublished\":\"2025-10-19T11:40:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/\"},\"wordCount\":2887,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/\",\"name\":\"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778'i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-10-19T11:40:53+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778’i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778'i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/","og_locale":"tr_TR","og_type":"article","og_title":"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778'i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme","og_description":"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778'i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme Giri\u015f OpenSSH, g","og_url":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-10-19T11:40:53+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"15 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778’i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme","datePublished":"2025-10-19T11:40:53+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/"},"wordCount":2887,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/","url":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/","name":"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778'i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-10-19T11:40:53+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/openssh-istemci-guvenlik-aciklari-cve-2016-0777-ve-cve-2016-0778i-useroaming-ozelligini-devre-disi-birakarak-duzeltme\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"OpenSSH \u0130stemci G\u00fcvenlik A\u00e7\u0131klar\u0131 CVE-2016-0777 ve CVE-2016-0778’i UseRoaming \u00d6zelli\u011fini Devre D\u0131\u015f\u0131 B\u0131rakarak D\u00fczeltme"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=32255"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32255\/revisions"}],"predecessor-version":[{"id":32256,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32255\/revisions\/32256"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=32255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=32255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=32255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}