{"id":121356,"date":"2025-01-16T03:46:11","date_gmt":"2025-01-16T01:46:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rsync-3-4-0"},"modified":"2025-01-16T03:46:11","modified_gmt":"2025-01-16T01:46:11","slug":"rsync-3-4-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/rsync-3-4-0","title":{"rendered":"Rsync 3.4.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Rsynci failide s\u00fcnkroonimise t\u00f6\u00f6riist on v\u00e4rskendatud, eemaldades 6 piisavalt kriitilist haavatavust. R\u00fcnnaku teostamiseks piisab anon\u00fc\u00fcmsest \u00fchendusest Rsynci serveriga lugemis\u00f5igustega.<\/p>\n<p>Parandatud haavatavused:<\/p>\n<ul>\n<li><strong>CVE-2024-12084<\/strong>\u00a0\u2014 m\u00e4lu \u00fcletav kirjutamine vale kontrollsummaga, mille suurus \u00fcletab 16 baiti.<\/li>\n<li><strong>CVE-2024-12085<\/strong>\u00a0\u2014 mittealgsete andmete lekkimine virnast (\u00fcks bait korraga) vale kontrollsuuruse kontrollsummade v\u00f5rdlemise k\u00e4igus.<\/li>\n<li><strong>CVE-2024-12086<\/strong>\u00a0\u2014 serveri ligip\u00e4\u00e4s kliendi s\u00fcsteemi juhuslike failide sisule vale kommunikatsiooni tokenite ja kontrollsummade genereerimise kaudu failide kopeerimisel kliendilt serverisse (sisu m\u00e4\u00e4ramine baitide kaupa kontrollsummade proovimise kaudu).<\/li>\n<li><strong>CVE-2024-12087<\/strong>\u00a0\u2014 v\u00e4ljaspool baaskausta minemine, kui kasutatakse valikut \u2014inc-recursive (l\u00fclitatakse sisse vaikimisi paljude lippude puhul). Haavatavus on tingitud puudulikest s\u00fcmboolsete linkide kontrollidest ja v\u00f5imaldab kirjutada faile v\u00e4ljaspool kliendi m\u00e4\u00e4ratud sihtkausta. R\u00fcndaja kontrollitav server v\u00f5ib seda haavatavust kasutada kliendi s\u00fcsteemi r\u00fcndamiseks.<\/li>\n<li><strong>CVE-2024-12088<\/strong>\u00a0\u2014 vale s\u00fcmboolsete linkide kontrollimine, mis osutab teistele s\u00fcmboolsetele linkidele, kasutades valikut \u2014safe-links. Probleem v\u00f5imaldab v\u00e4lja minna baaskaustast ja kirjutada andmeid mis tahes faili s\u00fcsteemis, s\u00f5ltuvalt kasutaja\u00f5igustest.<\/li>\n<li><strong>CVE-2024-12747<\/strong>\u00a0\u2014 s\u00fcmboolsete linkidega t\u00f6\u00f6tamise k\u00e4igus esinev v\u00f5idujooks, mis v\u00f5imaldab kasutajal oma \u00f5igusi t\u00f5sta ja saada ligip\u00e4\u00e4su privileeritud failidele serveris.<\/li>\n<\/ul>\n<p> <noindex><noindex><\/p>\n<p>See loetelu k\u00f5rvaldatud haavatavustest on p\u00e4rit OpenNETi veebisaidilt: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62557\">https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62557<\/a><\/p>\n<p><\/noindex><\/noindex> <\/p>\n<p>Teised muudatused uues versioonis:<\/p>\n<ul>\n<li>configure.ac: IPv6 kontrolli viga on parandatud, kuna tagastust\u00fc\u00fcp puudub.<\/li>\n<li>CI: FreeBSD kogumise liigutamine GitHub Actionsi.<\/li>\n<li>Lisatud vihje, et proxy v\u00f5ib k\u00e4sitleda nii tavalist kui ka <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/ssl-sertifikat\/\"   title=\"SSL\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2320\">SSL<\/a> voogu samaaegselt.<\/li>\n<li>Eemaldatud hoiatust mittekasutatava muutuja kohta.<\/li>\n<li>Popti v\u00e4rskendamine versioonile 1.19.<\/li>\n<li>Tugi: lisatud skript install_deps_ubuntu.sh.<\/li>\n<li>CI: reeglite parandamine k\u00e4ivituste jaoks.<\/li>\n<li>CI: Solaris kogumise lisamine.<\/li>\n<li>Apple silicon linker path details.<\/li>\n<li>acls: t\u00fc\u00fc s\u00fcnkroniseerimine orig_umask'ile ja kompileerimishoiatuste k\u00f5rvaldamine macOS-i jaoks.<\/li>\n<li>Parandatud mitmed clang-16 leitud hoiatused.<\/li>\n<li>rrsync: parandatud vale parameetrite nimetus manuaali SYNOPSIS-s.<\/li>\n<li>Sisse viidud PTR_SUB.<\/li>\n<li>Lisatud p\u00f5hijuurdep\u00e4\u00e4su kontrollimise v\u00f5imalus rrsynci kaudu.<\/li>\n<li>Kui sisseehitatud zlib ei ole kasutusel, kasutatakse libcrypto.<\/li>\n<li>Kohandamine GCC15(-std=gnu23) jaoks: parandatud funktsiooni pointeri \u00fclekastmine qsort()s.<\/li>\n<li>Parandatud tr\u00fckivead manuaalis.<\/li>\n<\/ul>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/opensource\/17848386\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0445 \u043d\u0438\u0445 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2024-12084\u00a0\u2014 \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442. CVE-2024-12085\u00a0\u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121356","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/rsync-3-4-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Rsync 3.4.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/rsync-3-4-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-01-16T01:46:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-01-16T01:46:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rsync 3.4.0 | ProHoster","description":"Rsynci failide s\u00fcnkroniseerimise utiliit on uuendatud, eemaldades 6 piisavalt kriitilist haavatavust.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/rsync-3-4-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Rsync 3.4.0 | ProHoster","og:description":"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/rsync-3-4-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-16T01:46:11+00:00","article:modified_time":"2025-01-16T01:46:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121356","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:39:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:43:19","updated":"2026-02-09 17:39:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=121356"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121356\/revisions"}],"predecessor-version":[{"id":159565,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121356\/revisions\/159565"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=121356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=121356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=121356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}