{"id":102953,"date":"2022-01-13T15:37:33","date_gmt":"2022-01-13T13:37:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d0%b8-%d0%b2-systemd-flatpak-samba-freerdp-clamav-node-js"},"modified":"2022-01-13T15:37:33","modified_gmt":"2022-01-13T13:37:33","slug":"uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","title":{"rendered":"\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Systemd-tmpfiles utiliidis, mis kuulub systemd koosseisu, on tuvastatud haavatavus (CVE-2021-3997), mis v\u00f5imaldab kontrollimatut rekurssiooni. Probleemi saab kasutada teenuse keelamiseks s\u00fcsteemi k\u00e4ivitamise ajal, luues kataloogis \/tmp suure hulga s\u00fcgavaid alamkatalooge. Parandus on praegu saadaval plaastri kujul. Pakettide uuendused probleemide k\u00f5rvaldamiseks on pakutud Ubuntu ja SUSE jaoks, kuid hetkel ei ole need saadaval Debianis, RHEL-is ega Fedora-s (parandused on testimisel).     <\/p>\n<p>Kui luuakse tuhandeid s\u00fcgavaid katalooge, katkeb operatsiooni \u201esystemd-tmpfiles \u2014remove\u201d t\u00e4itmine, kuna stak on t\u00e4is. T\u00fc\u00fcpiliselt t\u00e4idab utiliit systemd-tmpfiles \u00fches kutse korral kustutamis- ja loomistoimingud (\u201esystemd-tmpfiles \u2014create \u2014remove \u2014boot \u2014exclude-prefix=\/dev\u201d), esmalt toimub kustutamine ja seej\u00e4rel loomine, s.t. kokkuvarisemine kustutamise faasis viib olulistele failidele, mis on kirjas \/usr\/lib\/tmpfiles.d\/*.conf, loomise eba\u00f5nnestumiseni.      <\/p>\n<p>Mainitakse ka ohtlikumat r\u00fcnnaku stsenaariumi Ubuntu 21.04 jaoks: kuna systemd-tmpfiles'i kokkuvarisemise t\u00f5ttu ei luua faili \/run\/lock\/subsys, ja kataloog \/run\/lock on k\u00f5igile kasutajatele kirjutatav, v\u00f5ib r\u00fcndaja luua katalooge \/run\/lock\/subsys enda identifikaatori all ja luua s\u00fcmboolsete linkide kaudu, mis ristuvad s\u00fcsteemiprotsesside lukufailidega, s\u00fcsteemifailide \u00fclekirjanduse.     <\/p>\n<p>Samuti on m\u00e4rkimisv\u00e4\u00e4rne, et on ilmunud uusi versioone projektidest Flatpak, Samba, FreeRDP, Clamav ja Node.js, milles on k\u00f5rvaldatud haavatavused:    <\/p>\n<ul>\n<li class=\"l\"> Iseseisvate Flatpak paketihaldust\u00f6\u00f6riistade versioonides 1.10.6 ja 1.12.3 on lahendatud kaks haavatavust: Esimene haavatavus (CVE-2021-43860) v\u00f5imaldab laadida paketti usaldamatust reposi kaudu, manipuleerides metandmetega, peites teatud laiendatud \u00f5iguste kuvamise installimise k\u00e4igus. Teine haavatavus (ilma CVE-ta) v\u00f5imaldab paketi ehitamisel k\u00e4suga \u201eflatpak-builder \u2014mirror-screenshots-url\u201d luua katalooge failis\u00fcsteemi alale v\u00e4ljaspool ehitamise katalooge.\n<li class=\"l\">Samba 4.13.16 uuenduses on parandatud haavatavus (CVE-2021-43566), mis v\u00f5imaldab kliendil s\u00fcmboolt\u00fccke kasutades SMB1 v\u00f5i NFS-l sektorites luua katalooge v\u00e4ljaspool eksporditud failis\u00fcsteemi piirkonda (probleem tuleneb v\u00f5istlusolukorrast ja praktiliselt raske \u00e4ra kasutada, kuid teoreetiliselt v\u00f5imalik). Sellele on vastuv\u00f5tlikud versioonid enne 4.13.16. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-newyork\/\"   title=\"serveril\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2695\">serveril<\/a> Samal ajal on avaldatud ka raport teise sarnase haavatavuse kohta (CVE-2021-20316), mis v\u00f5imaldab autentitud kliendil s\u00fcmboolt\u00fccke manipuleerides lugeda v\u00f5i muuta faili sisu v\u00f5i katalooge metaandmeid eksporditud sektorist v\u00e4ljaspool. Probleem on lahendatud versioonis 4.15.0, kuid see m\u00f5jutab ka varasemaid haru. Samas ei avaldata parandusi vanadele harudele, kuna Samba VFS vana arhitektuur ei v\u00f5imalda probleemi lahendada, kuna metaandmete operatsioonid on seotud failiteedega (Sambas 4.15 on VFS kiht t\u00e4ielikult \u00fcmber tehtud). Probleemi oht on v\u00e4hendatud, kuna selle \u00e4rakasutamine on piisavalt keeruline ja kasutaja \u00f5igused peavad lubama lugemist v\u00f5i kirjutamist sihtfaili v\u00f5i katalooge.\n<p>Avaldatud on ka aruanne veel \u00fche sarnase haavatavuse kohta (CVE-2021-20316), mis v\u00f5imaldab autentitud kliendil s\u00fcmboolsete linkide manipuleerimise kaudu lugeda v\u00f5i muuta faili v\u00f5i katalooge metainfot failis\u00fcsteemis. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-los-angeles\/\"   title=\"serverile\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3788\">serverile<\/a> eksportimise alalt. Probleem on lahendatud versioonis 4.15.0, kuid see puudutab ka varasemaid harude. Parandusi vanadele harudele ei avaldata, kuna Samba VFS vana arhitektuur ei v\u00f5imalda probleemi lahendada, kuna metaandmete toimingud on seotud failiteedega (Samba 4.15-s on VFS kiht t\u00e4ielikult \u00fcmber kujundatud). Probleemi oht on v\u00e4hendatud, kuna see on piisavalt keeruline, et \u00e4ra kasutada, ja kasutaja \u00f5igused peavad lubama sihtfaili v\u00f5i katalooge lugemise v\u00f5i kirjutamise.      <\/p>\n<li class=\"l\"> FreeRDP 2.5 v\u00e4ljalaskeversioonis, mis pakub avatud juurdep\u00e4\u00e4su protokolli RDP (Remote Desktop Protocol) rakendust, on lahendatud kolm turvaprobleemi (CVE identifikaatoreid ei ole m\u00e4\u00e4ratud), mis v\u00f5ivad p\u00f5hjustada puhver\u00fclevoolu, kui kasutatav lokaal on vale, t\u00f6\u00f6tlemisel on vale registri v\u00e4\u00e4rtus ja vale t\u00e4ienduse nimi on antud. Uue versiooni muudatusteks on OpenSSL 3.0 toe lisamine, TcpConnectTimeout seadmise rakendamine, parema \u00fchilduvuse saavutamine LibreSSL-iga ning l\u00f5pptulemuste probleemide lahendamine Waylandi keskkondades.\n<li class=\"l\"> Uutes ClamAV 0.103.5 ja 0.104.2 versioonides on k\u00f5rvaldatud CVE-2022-20698 haavatavus, mis on seotud vale viitamiseks ja v\u00f5imaldab kaugel p\u00f5hjustada protsessi kokkujooksmise, kui pakett on kompileeritud libjson-c teegiga ja seadetes on lubatud valik CL_SCAN_GENERAL_COLLECT_METADATA (clamscan \u2014gen-json).\n<li class=\"l\"> Node.js versioonides 16.13.2, 14.18.3, 17.3.1 ja 12.22.9 on k\u00f5rvaldatud neli haavatavust: sertifikaadi kontrollimise m\u00f6\u00f6da hiilimine v\u00f5rgu\u00fchenduse kinnitamisel eksitava SAN-i (Subject Alternative Names) stringiks vormimise t\u00f5ttu (CVE-2021-44532); mitme v\u00e4\u00e4rtuse vale k\u00e4itlemine subject ja issuer v\u00e4ljad, mida saab kasutada nende v\u00e4ljade kontrollimise m\u00f6\u00f6da hiilimiseks sertifikaatides (CVE-2021-44533); URI SAN-t\u00fc\u00fcbi piirangute m\u00f6\u00f6da hiilimine sertifikaatides (CVE-2021-44531); ja ebapiisav sisendi kontroll console.table() funktsioonis, mida v\u00f5iks kasutada t\u00fchi stringide m\u00e4\u00e4ramiseks numbrilistele v\u00f5tmetele (CVE-2022-21824).          <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56498\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102953","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-01-13T13:37:33+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-01-13T13:37:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js haavatavused | ProHoster","description":"Systemd komponenti kuuluv s\u00fcsteemutiliit systemd-tmpfiles sisaldab haavatavust (CVE-2021-3997), mis v\u00f5imaldab juhtimata rekursiivsust. Probleemi saab kasutada teenuse katkestamiseks s\u00fcsteemi k\u00e4ivitamise ajal, luues kaustas \/tmp suure hulga sisemisi kaustasid. Praegu on parandamine saadaval plaastri kujul. Probleemide lahendamise paketid on saadaval Ubuntu ja SUSE-s, kuid pole veel saadaval.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js | ProHoster","og:description":"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-13T13:37:33+00:00","article:modified_time":"2022-01-13T13:37:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102953","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-13 13:38:58","updated":"2026-02-22 15:30:39"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102953"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102953\/revisions"}],"predecessor-version":[{"id":162316,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102953\/revisions\/162316"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}