{"id":110626,"date":"2023-10-05T15:10:20","date_gmt":"2023-10-05T13:10:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rocky-linux-vvyol-v-stroj-repozitorij-s-paketami-dlya-usileniya-bezopasnosti"},"modified":"2023-10-05T15:10:20","modified_gmt":"2023-10-05T13:10:20","slug":"rocky-linux-vvyol-v-stroj-repozitorij-s-paketami-dlya-usileniya-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/rocky-linux-vvyol-v-stroj-repozitorij-s-paketami-dlya-usileniya-bezopasnosti","title":{"rendered":"Rocky Linux uvedl do provozu repozit\u00e1\u0159 s bal\u00ed\u010dky pro zaji\u0161t\u011bn\u00ed bezpe\u010dnosti.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V\u00fdvoj\u00e1\u0159i distribuce Rocky Linux, zam\u011b\u0159en\u00e9 na vytvo\u0159en\u00ed svobodn\u00e9 verze RHEL, kter\u00e1 by mohla nahradit klasick\u00fd CentOS, ozn\u00e1mili zalo\u017een\u00ed nov\u00e9 SIG skupiny (Special Interest Group) pro bezpe\u010dnost, kter\u00e1 se bude zab\u00fdvat udr\u017eov\u00e1n\u00edm bal\u00ed\u010dk\u016f souvisej\u00edc\u00edch s poskytov\u00e1n\u00edm pokro\u010dil\u00e9 ochrany a dod\u00e1v\u00e1n\u00edm dal\u0161\u00edch n\u00e1stroj\u016f pro zaji\u0161t\u011bn\u00ed bezpe\u010dnosti. Skupina tak\u00e9 bude publikovat alternativn\u00ed verze st\u00e1vaj\u00edc\u00edch bal\u00ed\u010dk\u016f, sestaven\u00fdch s r\u016fzn\u00fdmi mechanismy pro zv\u00fd\u0161en\u00ed bezpe\u010dnosti nebo odstran\u011bn\u00ed zranitelnost\u00ed, kter\u00e9 z\u016fst\u00e1vaj\u00ed neopravn\u00e9 v RHEL a CentOS Stream.    <\/p>\n<p>Vyvinut\u00e9 technologie budou publikov\u00e1ny v samostatn\u00e9m repozit\u00e1\u0159i, kter\u00fd bude mo\u017en\u00e9 pou\u017e\u00edt i v jin\u00fdch distribuc\u00edch kompatibiln\u00edch s red Hat Enterprise Linux. Pro p\u0159ipojen\u00ed repozit\u00e1\u0159e v Rocky Linux ji\u017e lze pou\u017e\u00edt p\u0159\u00edkaz \u201ednf install rocky-release-security\u201c. V sou\u010dasn\u00e9 dob\u011b jsou v repozit\u00e1\u0159i nab\u00edzeny n\u00e1sleduj\u00edc\u00ed bal\u00ed\u010dky:  <\/p>\n<ul>\n<li class=\"l\"> Modul j\u00e1dra LKRG (Linux Kernel Runtime Guard), ur\u010den\u00fd k odhalov\u00e1n\u00ed a blokov\u00e1n\u00ed \u00fatok\u016f a naru\u0161en\u00ed integrity struktur j\u00e1dra (nap\u0159\u00edklad modul m\u016f\u017ee chr\u00e1nit p\u0159ed neopr\u00e1vn\u011bn\u00fdmi zm\u011bnami v b\u011b\u017e\u00edc\u00edm j\u00e1d\u0159e a pokusy o zm\u011bnu opr\u00e1vn\u011bn\u00ed u\u017eivatelsk\u00fdch proces\u016f). Bal\u00ed\u010dek je sestaven pro verze RHEL8 a RHEL9.\n<li class=\"l\"> N\u00e1stroj passwdqc pro kontrolu slo\u017eitosti hesel a fr\u00e1z\u00ed, zahrnuj\u00edc\u00ed modul pam_passwdqc, programy pwqcheck, pwqfilter a pwqgen, a tak\u00e9 knihovnu libpasswdqc. Bal\u00ed\u010dek je sestaven pro verzi RHEL9.\n<li class=\"l\"> Bal\u00ed\u010dek s Glibc, zahrnuj\u00edc\u00ed zm\u011bny pro zv\u00fd\u0161en\u00ed bezpe\u010dnosti, vyvinut\u00e9 projektem Owl a aplikovan\u00e9 v ALT Linux. Bal\u00ed\u010dek tak\u00e9 obsahuje opravy, kter\u00e9 blokuj\u00ed dv\u011b zranitelnosti: zranitelnost v ld.so (CVE-2023-4911), kter\u00e1 umo\u017e\u0148uje m\u00edstn\u00edmu u\u017eivateli zv\u00fd\u0161it si opr\u00e1vn\u011bn\u00ed v syst\u00e9mu pomoc\u00ed speci\u00e1ln\u011b form\u00e1tovan\u00fdch dat v prom\u011bnn\u00e9 prost\u0159ed\u00ed GLIBC_TUNABLES, a zranitelnost (CVE-2023-4527) ve funkci getaddrinfo, kter\u00e1 m\u016f\u017ee v\u00e9st k \u00faniku dat ze z\u00e1sobn\u00edku nebo k hav\u00e1rii. Bal\u00ed\u010dek je sestaven pro verzi RHEL9.\n<li class=\"l\"> Bal\u00ed\u010dek s OpenSSH, ve kter\u00e9m je sshd spojen s men\u0161\u00edm po\u010dtem sd\u00edlen\u00fdch knihoven. Bal\u00ed\u010dek je sestaven pro verzi RHEL9.\n<li class=\"l\"> Souvisej\u00edc\u00ed bal\u00ed\u010dky: pam_ssh_agent_auth, libnsl, nscd, nss_db, nss_hesiod.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=59876\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Rocky Linux, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 RHEL, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0439 \u0437\u0430\u043d\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CentOS, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 SIG-\u0433\u0440\u0443\u043f\u043f\u044b (Special Interest Group) Security, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u043d\u0438\u043c\u0430\u0442\u044c\u0441\u044f \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043a\u043e\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0413\u0440\u0443\u043f\u043f\u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0434\u043b\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110626","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Rocky Linux, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 RHEL, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0439 \u0437\u0430\u043d\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CentOS, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 SIG-\u0433\u0440\u0443\u043f\u043f\u044b (Special Interest Group) Security, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/rocky-linux-vvyol-v-stroj-repozitorij-s-paketami-dlya-usileniya-bezopasnosti\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Rocky Linux \u0432\u0432\u0451\u043b \u0432 \u0441\u0442\u0440\u043e\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Rocky Linux, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 RHEL, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0439 \u0437\u0430\u043d\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CentOS, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 SIG-\u0433\u0440\u0443\u043f\u043f\u044b (Special Interest Group) Security, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/rocky-linux-vvyol-v-stroj-repozitorij-s-paketami-dlya-usileniya-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-10-05T13:10:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-10-05T13:10:20+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rocky Linux uvedl do provozu repozit\u00e1\u0159 s bal\u00ed\u010dky pro pos\u00edlen\u00ed bezpe\u010dnosti | ProHoster","description":"V\u00fdvoj\u00e1\u0159i distribuce Rocky Linux, zam\u011b\u0159en\u00e9 na vytvo\u0159en\u00ed voln\u00e9 verze RHEL, kter\u00e1 m\u00e1 nahradit tradi\u010dn\u00ed CentOS, ozn\u00e1mili vytvo\u0159en\u00ed nov\u00e9 SIG skupiny (Special Interest Group) pro bezpe\u010dnost.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/rocky-linux-vvyol-v-stroj-repozitorij-s-paketami-dlya-usileniya-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Rocky Linux \u0432\u0432\u0451\u043b \u0432 \u0441\u0442\u0440\u043e\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Rocky Linux, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 RHEL, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0439 \u0437\u0430\u043d\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e CentOS, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 SIG-\u0433\u0440\u0443\u043f\u043f\u044b (Special Interest Group) Security, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/rocky-linux-vvyol-v-stroj-repozitorij-s-paketami-dlya-usileniya-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-05T13:10:20+00:00","article:modified_time":"2023-10-05T13:10:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/110626","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=110626"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/110626\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=110626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=110626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=110626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}