{"id":122827,"date":"2025-03-25T04:22:52","date_gmt":"2025-03-25T02:22:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-pagure-i-obs-dopuskavshie-komprometacziyu-paketov-v-repozitoriyah-fedora-i-opensuse"},"modified":"2025-03-25T04:22:52","modified_gmt":"2025-03-25T02:22:52","slug":"uyazvimosti-v-pagure-i-obs-dopuskavshie-komprometacziyu-paketov-v-repozitoriyah-fedora-i-opensuse","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-pagure-i-obs-dopuskavshie-komprometacziyu-paketov-v-repozitoriyah-fedora-i-opensuse","title":{"rendered":"Haavatavused Pagure'is ja OBS'is, mis v\u00f5imaldasid Fedora ja openSUSE repo pakettide kompromiteerimist.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Fenriski turvauuringute teadlased avalikustasid teavet Pagure'i ja OBS'i (Open Build Service) t\u00f6\u00f6riistade haavatavuste kohta, mis v\u00f5imaldasid kompromiteerida Fedora ja openSUSE pakettide loomise infrastruktuure. Uurijad demonstreerisid v\u00f5imalust r\u00fcnnata ja t\u00e4ita suvalist koodi Pagure'i ja OBS'i serverites, mida oleks saanud kasutada muudatuste tegemiseks Fedora ja openSUSE repo pakettides.     <\/p>\n<p>Pagure platvormil, mida kasutatakse Fedora pakettide ja metaandmete koost\u00f6\u00f6ks, tuvastati 4 haavatavust. Tuvastatud probleemide \u00e4rakasutamiseks on vajalik konto olemasolu Pagure'is, mille v\u00f5ivad luua k\u00f5ik huvilised (praegu on Pagure.io's registreeritud 24899 kasutajat). Kolm probleemi v\u00f5imaldavad lugeda s\u00fcsteemi faile, ja \u00fcks probleem v\u00f5imaldab t\u00e4ita suvalist koodi. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-newyork\/\"   title=\"serveris\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2806\">serveris<\/a>. Probleemid tuvastati 1. jaanuaril 2024, teatati bugzilla.redhat.com kaudu 25. aprillil 2024 ja lahendati Pagure'is 3 tunni jooksul.    <\/p>\n<ul>\n<li class=\"l\"> Haavatavused CVE-2024-4981 ja CVE-2024-47515 on p\u00f5hjustatud s\u00fcmboolsete linkide vale t\u00f6\u00f6tlemise t\u00f5ttu failide v\u00e4rskendamise ja arhiivide genereerimise funktsioonides. Need haavatavused v\u00f5imaldavad lugeda kohalikke faile serveris, n\u00e4iteks on v\u00f5imalik saada juurdep\u00e4\u00e4s Pagure'i administraatori seansiseade faili sisule ja saada sellele \u00f5igustega juurde. Haavatavuse \u00e4rakasutamine funktsioonis _update_file_in_git() seisneb Pagure'is repo loomises; uue faili lisamises commit'iga, mis on loodud s\u00fcmboolse lingina soovitud s\u00fcsteemifailile; ja selle faili avamises veebiliideses redigeerimiseks.\n<li class=\"l\"> Haavatavus (CVE-2024-4982) funktsioonis view_issue_raw_file() v\u00f5imaldab p\u00e4\u00e4seda baaskaustast v\u00e4ljapoole, kui esitada s\u00fcmboleid &#171;\\\/..&#187; taotletud v\u00e4lja parameetrites. Probleem v\u00f5imaldab lugeda s\u00fcsteemis faile, s\u00f5ltuvalt selle protsessi ligip\u00e4\u00e4su\u00f5igustest, mille all web-liides t\u00f6\u00f6tab. N\u00e4iteks saab faili \/etc\/passwd vaatamiseks avada lehe &#171;http:\\\/\\\/pagure.local:5000\\\/your-repository\\\/issue\\\/raw\\\/..\\\/..\\\/..\\\/..\\\/..\\\/..\\\/..\\\/etc\\\/passwd&#187;.\n<li class=\"l\"> Haavatavus (CVE-2024-47516) funktsioonis PagureRepo.log() v\u00f5imaldab suunata oma k\u00e4ske ja k\u00e4ivitada koodi serveris. Probleem tuleneb sellest, et faili muudatuste ajaloo vaatamisel web-liidese kaudu k\u00e4ivitub k\u00e4sk &#171;git&#187; koos haru identifikaatori edastamisega k\u00e4sureal (n\u00e4iteks &#171;\\\/usr\\\/bin\\\/git &#8212;pretty=oneline &#8212;abbrev-commit &lt;HERE&gt; &#8212; README.md&#187;). Identifikaatori \u00f5igsust ei kontrollita, seega v\u00f5ib selle asemel edastada mis tahes k\u00e4surea valiku, n\u00e4iteks &#171;&#8212;output=\\\/tmp\\\/foo.bar&#187; v\u00e4ljundi suunamiseks faili. R\u00fcnnakute l\u00e4bi on v\u00f5imalik faili s\u00fcsteemis \u00fcle kirjutada, edastades j\u00e4rgmise t\u00fc\u00fcbi p\u00e4ringu: http:\\\/\\\/pagure.local:5000\\\/test\\\/history\\\/README.md?identifier=&#8212;output=\\\/tmp\\\/foo.bar\n<p>Pagure t\u00f6\u00f6tab kasutaja git all, seega saab ainult selle kasutaja faile \u00fcle kirjutada. Koodi t\u00e4itmiseks serveris v\u00f5ib kasutada teenust, mis v\u00f5imaldab juurdep\u00e4\u00e4su repole SSH kaudu, millele helistades k\u00e4ivitub k\u00e4sk &#171;bash -c \\\/usr\\\/libexec\\\/pagure\\\/aclchecker.py&#187;. R\u00fcndaja v\u00f5ib kasutada haavatavust faili &#171;\\\/srv\\\/git\\\/.bashrc&#187; \u00fcle kirjutamiseks ja see fail k\u00e4ivitatakse bash interpretatsioonis, kui sellele repole SSH kaudu juurde p\u00e4\u00e4seb.      <\/p>\n<p>R\u00fcnnak koosneb s\u00fcsteemi Pagure registreerimisest, repositooriumi loomisest, README.md faili lisamisest commiti m\u00e4rkuses formaadis &#171;|| \\\/bin\\\/bash&#187; ja p\u00e4ringu edastamisest &#171;http:\\\/\\\/pagure.local:5000\\\/test\\\/history\\\/README.md?identifier=&#8212;output=\\\/srv\\\/git\\\/.bashrc&#187;. Nende sammsammuliste tegevuste k\u00e4igus kirjutatakse faili &#171;\\\/srv\\\/git\\\/.bashrc&#187; rida formaadis &#171;34\u04305\u044143 || \\\/bin\\\/bash&#187;. Loodud faili &#171;\\\/srv\\\/git\\\/.bashrc&#187; k\u00e4ivitamiseks piisab SSH kaudu oma konto all repositooriumiga \u00fchenduse loomisest. Koodi t\u00e4itmine git kasutaja \u00f5igustes serveris Pagure v\u00f5imaldab kontrollida kogu sisuhulga repositooriumitest, kus on pakette.    <\/ul>\n<p>    <center><iframe title=\"Pagure\" src=\"https:\/\/player.vimeo.com\/video\/1066145210?h=0716980f9b\" width=\"640\" height=\"360\" frameborder=\"0\" allowfullscreen style =\"max-width: 100%;\" loading=\"lazy\"><\/iframe><\/center>        <\/p>\n<p>Platvormil OBS (Open Build Service), mida kasutatakse openSUSE's ja m\u00f5nedes teistes jaotustes pakettide kogu loomiseks, on avastatud haavatavus (CVE-2024-22033), mis v\u00f5imaldab oma koodi serveris k\u00e4ivitada. Haavatavus avastati 27. juunil 2024, teatati openSUSE projektile 29. juunil ja k\u00f5rvaldatakse 10. juulil.    <\/p>\n<p>Haavatavus esineb teenuses &#171;obs-service-download_url&#187;, kus puudus n\u00f5uetekohane URL-i kontroll, mida rakendatakse wget utiliidi k\u00e4ivitamisel skriptist, mis laadib allalaaditud koodi OBS-i. R\u00fcndaja v\u00f5ib m\u00e4\u00e4rata OBS-i teenuses paketi konfigureerimise, kus allalaadimise URL-i asemel on wget-i k\u00e4surea valik, n\u00e4iteks: &lt;services&gt; &lt;service name=&#187;download_url&#187;&gt; &lt;param name=&#187;url&#187;&gt;&#8212;output-document=\\\/tmp\\\/test&lt;\\\/param&gt; &lt;param name=&#187;download-manifest&#187;&gt;tempfile&lt;\\\/param&gt; &lt;\\\/service&gt; &lt;\\\/services&gt;      <\/p>\n<p> Vea v\u00e4ltimiseks, kui proovite k\u00e4ivitada wget-i ilma URL-ita, on n\u00e4idatud &#171;download-manifest&#187; valik, mis lubab m\u00e4\u00e4rata URL-ide loetelu eraldi failis. \u00dclaltoodud n\u00e4ide k\u00e4ivitab k\u00e4su: \\\/usr\\\/bin\\\/wget -i \\\/srv\\\/obs\\\/service\\\/XXXXX\\\/src\\\/tempfile -4 &#8212;output-document=\\\/tmp\\\/test    <\/p>\n<p>mis v\u00f5imaldab salvestada faili \\\/tmp\\\/test sisu, mis laaditi alla lingilt, mis on m\u00e4\u00e4ratud failis \\\/srv\\\/obs\\\/service\\\/XXXXX\\\/src\\\/tempfile r\u00fcndaja poolt, kes laadis selle \u00fcles OBS-i l\u00e4bi build.opensuse.org'i liidese, mis v\u00f5imaldab tasuta registreerimist. Lisaks faili \u00fcle kirjutamise serveris saab r\u00fcndaja ka endale saata mis tahes faili, m\u00e4\u00e4rates &#171;&#8212;output-document&#187; asemel valiku &#171;&#8212;post-file&#187;, n\u00e4iteks &#171;&#8212;post-file=\\\/etc\\\/passwd&#187;. Nii saab r\u00fcndaja lugeda ja kirjutada serveri faile, nii kaugele kui \u00f5igused, milles OBS teenus k\u00e4ivitub, lubavad.    <\/p>\n<p>Kuna faili kirjutamise v\u00f5imaluste muutmine koodi t\u00e4itmiseks serveris on uurijate poolt pakutud meetod, mis koosneb kahest etapist. Kaks etappi on vajalikud, kuna r\u00fcndaja saab luua faili &#171;.wgetrc&#187; wget-i seadistustega, kuid seda ei piisa k\u00e4skude k\u00e4ivitamiseks. Sellegipoolest saab &#171;.wgetrc&#187; kaudu luua tingimusi, et k\u00e4ivitada mis tahes programmi s\u00fcsteemis, kuid ilma argumentide edastamiseta. Arbitraarse koodi k\u00e4ivitamiseks on soovitatud k\u00e4ivitada programm &#171;prove&#187;, mis t\u00f6\u00f6tleb seadistusfaili &#171;.proverc&#187;, mis v\u00f5imaldab m\u00e4\u00e4rata &#171;&#8212;exec&#187; valiku, et t\u00e4ita mis tahes koodi.     <\/p>\n<p>Esimese etapi k\u00e4igus \u00fclaltoodud toimingute kaudu \"download-manifest\" kasutaja kodukataloogis \"obsservicerun\" luuakse fail \".proverc\", mis sisaldab k\u00e4ske, mis t\u00e4idetakse protsessi \"prove\" k\u00e4ivitamisel. Teises etapis luuakse fail \".wgetrc\" parameetriga \"use-askpass=\/usr\/bin\/prove\", mis kutsub esile \"prove\". P\u00e4rast nende failide ilmumist piisab, kui luua olud igasuguste andmete allalaadimiseks wget-i abil, ja see viib r\u00fcndaja koodi k\u00e4ivitumiseni serveris kasutaja\u00f5igustega \"obsservicerun\". Kasutaja \"obsservicerun\" \u00f5igused on piisavad, et v\u00e4lja v\u00f5tta reposiitidest v\u00f5tmed, mida OBS-i kasutajad kasutavad pakettide allkirjastamiseks.     <center>  <iframe title=\"Open Build Service\" src=\"https:\/\/player.vimeo.com\/video\/1066093605?h=d7a210d719\" width=\"640\" height=\"360\" frameborder=\"0\" allowfullscreen style =\"max-width: 100%;\" loading=\"lazy\"><\/iframe><\/center>    <\/p>\n<p>T\u00e4iendav teave: SUSE tootetehnika meeskond usub, et OBSi haavatavuse oht on \u00fcle hinnatud ja uurijate v\u00e4ide, et probleem v\u00f5imaldab kompromiteerida k\u00f5ik paketid openSUSE'i distributsioonis, ei vasta t\u00f5ele. Tuletatakse meelde, et build.opensuse.org infrastruktuuri teenuseid k\u00e4itatakse isoleeritud konteineritega, mis uuesti luuakse ja ei sisalda kriitilist teavet. Leitud haavatavust peetakse ohtlikuks, kuid ebapiisavaks openSUSE'i ehitusinfrastruktuuri ja loodud pakettide kompromiteerimiseks. Samuti \u00f6eldakse, et OBSi liidese tegevusi, nagu on kirjeldatud r\u00fcndes, v\u00f5idi sooritada ainult OBSi variandi puhul, mis on arendaja t\u00f6\u00f6jaamas kohalikult installitud.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62928\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Fenrisk \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 Pagure \u0438 OBS (Open Build Service), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Fedora \u0438 openSUSE. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0441 Pagure \u0438 OBS, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0430\u043a\u0435\u0442\u044b \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 Fedora \u0438 openSUSE. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-122827","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Fenrisk \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 Pagure \u0438 OBS (Open Build Service), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-pagure-i-obs-dopuskavshie-komprometacziyu-paketov-v-repozitoriyah-fedora-i-opensuse\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Pagure \u0438 OBS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0432\u0448\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 Fedora \u0438 openSUSE | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Fenrisk \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 Pagure \u0438 OBS (Open Build Service), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-pagure-i-obs-dopuskavshie-komprometacziyu-paketov-v-repozitoriyah-fedora-i-opensuse\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-03-25T02:22:52+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-03-25T02:22:52+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pagure'i ja OBSi haavatavused, mis v\u00f5imaldasid paketide kompromiteerimist Fedora ja openSUSE hoidlates | ProHoster","description":"Fenriski ettev\u00f5tte turuuringute spetsialistid on avalikustanud teavet Pagure'i ja OBSi (Open Build Service) t\u00f6\u00f6riistade haavatavuste kohta, mis on v\u00f5imaldanud pakettide loomise infrastruktuuride kompromiteerimist.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-pagure-i-obs-dopuskavshie-komprometacziyu-paketov-v-repozitoriyah-fedora-i-opensuse","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Pagure \u0438 OBS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0432\u0448\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 Fedora \u0438 openSUSE | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Fenrisk \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 Pagure \u0438 OBS (Open Build Service), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-pagure-i-obs-dopuskavshie-komprometacziyu-paketov-v-repozitoriyah-fedora-i-opensuse","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-03-25T02:22:52+00:00","article:modified_time":"2025-03-25T02:22:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"122827","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:07:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 11:32:22","updated":"2026-02-09 22:07:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/122827","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=122827"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/122827\/revisions"}],"predecessor-version":[{"id":160086,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/122827\/revisions\/160086"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=122827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=122827"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=122827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}