{"id":181790,"date":"2026-05-29T02:48:51","date_gmt":"2026-05-29T00:48:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-unbound-kata-containers-bind-postgresql-hplip-mongodb-rsync-7-zip-yelp-qsnapper-i-suricata"},"modified":"2026-05-29T02:48:51","modified_gmt":"2026-05-29T00:48:51","slug":"uyazvimosti-v-unbound-kata-containers-bind-postgresql-hplip-mongodb-rsync-7-zip-yelp-qsnapper-i-suricata","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-unbound-kata-containers-bind-postgresql-hplip-mongodb-rsync-7-zip-yelp-qsnapper-i-suricata","title":{"rendered":"Haavatavused Unboundis, Kata-Containersis, BINDis, PostgreSQL-is, HPLIP-is, MongoDB-s, Rsyncis, 7-zipis, Yelp-is, qSnapperis ja Suricatas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Hiljuti avastatud mitu t\u00f5sist haavatavust:<\/p>\n<ul>\n<li class=\"l\"> Kuu haavatavust rsynci failide s\u00fcnkroonimise utiliidis. Ohtlikum probleem (CVE-2026-29518) tuleneb v\u00f5istlusest s\u00fcmboolsete linkide t\u00f6\u00f6tlemisel ja v\u00f5imaldab privileegide t\u00f5stmist, kui rsync k\u00e4ivitatakse taustprotsessina ilma chroot-isolatsioonita. R\u00fcnnak viiakse l\u00e4bi faili asendamise kaudu s\u00fcmboolse lingiga, mis viitab s\u00fcsteemis suvalisele failile kontrollimise l\u00e4biviimisel, kuid enne kirjutamisoperatsiooni algust. Haavatavused on k\u00f5rvaldatud rsync 3.4.3 v\u00e4ljaandes. CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> HPLIP-is, avatud printeri ja multifunktsionaalsete seadmete draiverite komplektis, tuvastatud haavatavused (CVE-2026-8631), mis v\u00f5imaldavad privileegide t\u00f5stmist ja koodi t\u00e4itmist s\u00fcsteemis. Probleemid tulenevad k\u00e4skude asendamise ja m\u00e4lu \u00fclet\u00e4itumise v\u00f5imalusest. Haavatavused on k\u00f5rvaldatud HPLIP 3.26.4 v\u00e4rskenduses. CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> D-Bus teenuses, mida kasutatakse qSnapperis, Btrfs-i hetkepiltide haldamiseks, leidub haavatavusi. Need haavatavused v\u00f5ivad viia s\u00fcsteemis privileegide t\u00f5usuni (CVE-2026-41046), teabe lekkimiseni muudatuste kohta hetkepiltide vahel (CVE-2026-41047) ning autentimise \u00fcmbersalitsemise v\u00f5imaldamiseni Polkitile juurdep\u00e4\u00e4sul (CVE-2026-41045). K\u00f5ige ohtlikum haavatavus tuleneb m\u00e4rkide \u201e..\/\u201d mittekontrollimisest teede puhul, mis edastatakse funktsioonile snapper::Snapper() D-Busi kaudu, mida saab kasutada libsnapperi konfiguratsioonifaili asendamiseks \u00f5iguste t\u00f5stetud k\u00e4ivitamise kontekstis.<br \/>\n CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.<\/p>\n<\/li>\n<li class=\"l\"> Haavatavus (CVE-2026-48095) 7-Zipi arhiivijas, mis p\u00f5hjustab m\u00e4lu \u00fclet\u00e4itumist NTFS-iga seotud andmete t\u00f6\u00f6tlemisel. Potentsiaalselt v\u00f5ib see viia r\u00fcndaja koodi t\u00e4itmiseni, kui 7-Zip'i kaudu p\u00e4\u00e4seb juurde spetsiaalselt kujundatud NTFS-failis\u00fcsteemi pildile. Haavatavus on k\u00f5rvaldatud 7-Zipi versioonis 26.01. CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> DNS-serveris Unbound 1.25.1 on parandatud 11 haavatavust. K\u00f5ige ohtlikumad haavatavused: CVE-2026-33278 \u2013 potentsiaalne kaugkoodi t\u00e4itmine DNSSEC-i valideerimise k\u00e4igus, CVE-2026-44608 \u2013 juurdep\u00e4\u00e4s juba vabastatud m\u00e4lule RPZ koodis ja CVE-2026-42944 \u2013 m\u00e4lupuhvri \u00fclevool nsid t\u00f6\u00f6tlemisel. CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> Haavatavus (CVE-2026-3593) BINDi DNS-serveris, mis v\u00f5imaldab m\u00e4lule juurdep\u00e4\u00e4su p\u00e4rast selle vabastamist ja m\u00e4lu sisu kahjustamist, kui esitatakse spetsiaalselt koostatud p\u00e4ring. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-shicago\/\" title=\"serverile\" data-wpil-keyword-link=\"linked\">serverile<\/a> DNS-over-HTTPS. Probleem on k\u00f5rvaldatud versioonides BIND 9.20.23 ja 9.21.22. Konfiguratsioonid, mis ei kasuta DNS-over-HTTPS, ei ole haavatavad. CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> Haavatavus (CVE-2026-47243) Kata Containers'is, konteinerite k\u00e4itamise virna, mis kasutab virtualiseerimise isolatsiooni, mis v\u00f5imaldab root-\u00f5iguste olemasolu korral konteineris luua s\u00fcmboolse lingi host-s\u00fcsteemi k\u00fcljes root-\u00f5igustega. S\u00fcmboolse lingi loomine \/etc\/cron.d-s v\u00f5ib korraldada r\u00fcndaja koodi t\u00e4itmise root-\u00f5igusega host-keskkonnas. Haavatavus tuleneb FUSE_SYMLINK otsep\u00e4ringu saatmise v\u00f5imalusest virtiofsd t\u00f6\u00f6tlejasse, mis k\u00e4ivitatakse hosti poolel. Probleem ilmneb runtime-rs kasutamisel ja on k\u00f5rvaldatud v\u00e4ljaandes 3.31.0.\n<p> CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> Haavatavus (CVE-2026-46529) Atril dokumentide vaatlejas, mis v\u00f5imaldab r\u00fcndaja koodi t\u00e4itmist, kui klikitakse lingile spetsiaalselt koostatud PDF-faili sees, mis \u00fchendab PDF-dokumendi ja ELF-formaadis teegi. Eksploid on olemas. Sarnane probleem esineb PDF-vaatlejates Evince ja Xreader. Probleem tuleneb special characterite tail quoting puudumise t\u00f5ttu funktsioonis ev_spawn(). Haavatavus on k\u00f5rvaldatud Evince 48.2, Atril 1.28.4\/1.26.3 ja Xreader 4.6.4\/3.6.7. CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> Haavatavus (CVE ei ole m\u00e4\u00e4ratud) Yelp'i dokumentide vaatlejas (GNOME Help), mis v\u00f5imaldab pakettide Flatpak sandboxes'i m\u00f6\u00f6da minna ja saada juurdep\u00e4\u00e4su p\u00f5hifailidele, avades spetsiaalselt koostatud abi-faili. Haavatavus sarnaneb eelmise aasta probleemiga ja erineb CSS-stiili asendamise kasutamisest, mis on sisseehitatud SVG-faili. Probleem on k\u00f5rvaldatud Yelp v\u00e4ljaandes 49.1.\n<\/li>\n<li class=\"l\"> Haavatavus (CVE-2026-41054) havegedis, taustprotsessis, mis genereerib entropiat pseudolootlike arvu generaatorile, mis v\u00f5imaldab privileegide t\u00f5stmist root-kasutajaks, saates spetsiaalselt koostatud k\u00e4su Unix-soketi kaudu. Probleem on k\u00f5rvaldatud havegedi v\u00e4ljaandes 1.9.21. CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> PostgreSQL andmebaasis on leitud 11 haavatavust, millest ohtlikum (CVE-2026-6637) v\u00f5ib v\u00f5imaldada koodi t\u00e4itmist operatsioonis\u00fcsteemi tasemel PostgreSQL serveri protsessi \u00f5igustes, kui t\u00e4idetakse spetsiaalselt vormistatud SQL-p\u00e4ringud (r\u00fcndajal peab olema mitteprivileegitud juurdep\u00e4\u00e4s andmebaasile). Teine ohtlik haavatavus (CVE-2026-6475) v\u00f5imaldab faile \u00fcle kirjutada <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-dronten\/\" title=\"serveril\" data-wpil-keyword-link=\"linked\">serveril<\/a> (n\u00e4iteks \/var\/lib\/postgres\/.bashrc) s\u00fcmboolsete linkide manipuleerimise kaudu pg_basebackup ja pg_rewind operatsioonide k\u00e4igus. Probleemid on lahendatud PostgreSQL versioonides 18.4, 17.10, 16.14, 15.18 ja 14.23. Samuti v\u00e4\u00e4rib m\u00e4rkimist, et varem tuvastatud haavatavuse (CVE-2026-2005) jaoks on avaldatud t\u00f6\u00f6tegevuse ekspploit.\n<p> CVE-d distributsioonides: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.<\/p>\n<li class=\"l\"> Rohke v\u00f5rgu sissetungi avastamise ja ennetamise s\u00fcsteemis Suricata on tuvastatud 16 haavatavust, millest neljale on antud kriitiline ohtlikkuse tase. Haavatavuse \u00fcksikasjad ei ole avalikult avaldatud, kuid nende ohtlikkuse taseme p\u00f5hjal tundub, et nad v\u00f5imaldavad koodi t\u00e4itmist serveris erilise vormistatud liikluse inspekteerimise k\u00e4igus. Haavatavused on lahendatud Suricata versioonides 8.0.5 ja 7.0.16.\n<\/li>\n<li class=\"l\"> MongoDB Serveris on leitud haavatavus (CVE-2026-8053), mis v\u00f5imaldab kirjutus\u00f5igustega kasutajal bufr\u00e4\u00f5hu \u00fclevoolu esile kutsuda ja saavutada oma koodi t\u00e4itmine serveris mongod protsessi \u00f5igustes. Haavatavus on lahendatud MongoDB versioonides 5.0.33, 6.0.28, 7.0.34, 8.0.23, 8.2.9 ja 8.3.2. CVE-d jaotustes: Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch.\n<\/li>\n<li class=\"l\"> K\u00fcmne haavatavuse (CVE-d ei ole m\u00e4\u00e4ratud) leidmine m\u00e4lukandjate vahem\u00e4lu s\u00fcsteemis Memcached, mille ohtlikumad toovad kaasa bufr\u00e4\u00f5hu \u00fclevoolu spetsiaalselt vormistatud p\u00e4ringute saatmise kaudu ja v\u00f5idakse potentsiaalselt kasutada koodi t\u00e4itmise korraldamiseks serveris. Haavatavused on lahendatud Memcached versioonis 1.6.42.\n<\/ul>\n<p>Allikas: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65565\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u0428\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 rsync. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 (CVE-2026-29518), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 rsync \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0444\u043e\u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0431\u0435\u0437 chroot-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u0444\u0430\u0439\u043b\u0430 \u043d\u0430 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432 \u043c\u043e\u043c\u0435\u043d\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181790","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u0428\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 rsync. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 (CVE-2026-29518), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 rsync \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0444\u043e\u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0431\u0435\u0437 chroot-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u0444\u0430\u0439\u043b\u0430 \u043d\u0430 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432 \u043c\u043e\u043c\u0435\u043d\u0442\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-unbound-kata-containers-bind-postgresql-hplip-mongodb-rsync-7-zip-yelp-qsnapper-i-suricata\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Unbound, Kata-Containers, BIND, PostgreSQL, HPLIP, MongoDB, Rsync, 7-zip, Yelp, qSnapper \u0438 Suricata | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u0428\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 rsync. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 (CVE-2026-29518), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 rsync \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0444\u043e\u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0431\u0435\u0437 chroot-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u0444\u0430\u0439\u043b\u0430 \u043d\u0430 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432 \u043c\u043e\u043c\u0435\u043d\u0442\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-unbound-kata-containers-bind-postgresql-hplip-mongodb-rsync-7-zip-yelp-qsnapper-i-suricata\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-29T00:48:51+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-29T00:48:51+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Haavatavused Unbound, Kata-Containers, BIND, PostgreSQL, HPLIP, MongoDB, Rsync, 7-zip, Yelp, qSnapper ja Suricata | ProHoster","description":"Viimase aja jooksul on avastatud mitmeid ohtlikke haavatavusi: Kuus haavatavust failide s\u00fcnkroniseerimise utiliidis rsync. Ohtlikum probleem (CVE-2026-29518), mis on p\u00f5hjustatud v\u00f5istlusolukorrast s\u00fcmboolsete linkide k\u00e4sitlemisel, v\u00f5imaldab t\u00f5sta oma privileege rsync k\u00e4itamisel taustaprotsessina ilma chroot-isolatsioonita. R\u00fcnnak toimub failibaasi asendamise kaudu s\u00fcmboolse lingiga, mis osutab s\u00fcsteemis suvalisele failile, hetkel","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-unbound-kata-containers-bind-postgresql-hplip-mongodb-rsync-7-zip-yelp-qsnapper-i-suricata","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Unbound, Kata-Containers, BIND, PostgreSQL, HPLIP, MongoDB, Rsync, 7-zip, Yelp, qSnapper \u0438 Suricata | ProHoster","og:description":"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u0428\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 rsync. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 (CVE-2026-29518), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 rsync \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0444\u043e\u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0431\u0435\u0437 chroot-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u043c\u0435\u043d\u0443 \u0444\u0430\u0439\u043b\u0430 \u043d\u0430 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432 \u043c\u043e\u043c\u0435\u043d\u0442","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimosti-v-unbound-kata-containers-bind-postgresql-hplip-mongodb-rsync-7-zip-yelp-qsnapper-i-suricata","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-29T00:48:51+00:00","article:modified_time":"2026-05-29T00:48:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181790","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=181790"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181790\/revisions"}],"predecessor-version":[{"id":182095,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181790\/revisions\/182095"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=181790"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=181790"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=181790"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}