{"id":114688,"date":"2024-04-01T00:25:54","date_gmt":"2024-03-31T22:25:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok"},"modified":"2024-04-01T00:25:54","modified_gmt":"2024-03-31T22:25:54","slug":"vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok","title":{"rendered":"Itt az ideje, hogy ellen\u0151rizz\u00fck a verzi\u00f3kat: a Linuxban kifinomult t\u00e1mad\u00e1st fedeztek fel a besz\u00e1ll\u00edt\u00f3i l\u00e1ncra","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A xz\/liblzma rosszindulat\u00fa k\u00f3dot tal\u00e1ltak, amely a SSH-n kereszt\u00fcli jogosulatlan t\u00e1voli hozz\u00e1f\u00e9r\u00e9s (h\u00e1ts\u00f3 ajt\u00f3) \u00e9s parancsok v\u00e9grehajt\u00e1s\u00e1ra ir\u00e1nyult (CVE-2024-3094). A k\u00e1rtev\u0151t az 5.6.0 \u00e9s 5.6.1 verzi\u00f3kba \u00e9p\u00edtett\u00e9k be, \u00e9s az OpenNet szerint m\u00e1r eljutott a Gentoo, Arch Linux, Debian sid\/unstable, Fedora Rawhide\/40-beta, openSUSE factory\/tumbleweed, LibreELEC, Alpine edge, Solus, CRUX, Cygwin, MSYS2 mingw, HP-UX, Homebrew, KaOS, NixOS unstable, OpenIndiana, Parabola, PCLinuxOS, OpenMandriva cooker \u00e9s rolling, pkgsrc current, Slackware current, Manjaro, Void Linux buildjeibe \u00e9s t\u00e1rol\u00f3iba. Azonban nem mindenhol aktiv\u00e1lhat\u00f3 a h\u00e1ts\u00f3 ajt\u00f3. A helyzetet s\u00falyosb\u00edtja, hogy a gyan\u00fa al\u00e1 ker\u00fclt fejleszt\u0151 az ut\u00f3bbi \u00e9vekben szomsz\u00e9dos k\u00f6z\u00f6ss\u00e9gi projektekben is r\u00e9szt vett. Ez\u00e9rt nincs okunk b\u00edzni az xz forr\u00e1sk\u00f3dj\u00e1ban mindaddig, am\u00edg az \u00f6sszes r\u00e9szlet \u00e9s k\u00f6vetkezm\u00e9ny ki nem der\u00fcl. K\u00fcl\u00f6n\u00f6sen, a GitHub-on l\u00e9v\u0151 megfelel\u0151 t\u00e1rol\u00f3 m\u00e1r blokkolva lett az \u00fczenettel: \u201eA hozz\u00e1f\u00e9r\u00e9st a GitHub alkalmazottai blokkolt\u00e1k, mivel megs\u00e9rtett\u00e9k a GitHub szolg\u00e1ltat\u00e1si felt\u00e9teleit.\u201d<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/3dnews.ru\/1102549\">3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 xz\/liblzma \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e SSH (\u0431\u044d\u043a\u0434\u043e\u0440) \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2024-3094). \u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0431\u044b\u043b \u0432\u043d\u0435\u0434\u0440\u0451\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.6.0 \u0438 5.6.1 \u0438, \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 OpenNet, \u0443\u0441\u043f\u0435\u043b \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Gentoo, Arch Linux, Debian sid\/unstable, Fedora Rawhide\/40-beta, openSUSE factory\/tumbleweed, LibreELEC, Alpine edge, Solus, CRUX, Cygwin, MSYS2 mingw, HP-UX, Homebrew, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114688","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 xz\/liblzma \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e SSH (\u0431\u044d\u043a\u0434\u043e\u0440) \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2024-3094).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u0440\u0435\u043c\u044f \u0441\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u0438: \u0432 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438\u0437\u043e\u0449\u0440\u0451\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 xz\/liblzma \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e SSH (\u0431\u044d\u043a\u0434\u043e\u0440) \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2024-3094).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-03-31T22:25:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-03-31T22:25:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ideje \u00f6sszehasonl\u00edtani a verzi\u00f3kat: kifinomult t\u00e1mad\u00e1st az ell\u00e1t\u00e1si l\u00e1ncon fedeztek fel Linuxon | ProHoster","description":"Az xz\/liblzma-ban k\u00e1rt\u00e9kony k\u00f3dot fedeztek fel, amely a jogosulatlan t\u00e1voli SSH hozz\u00e1f\u00e9r\u00e9s (h\u00e1ts\u00f3ajt\u00f3) megszerz\u00e9s\u00e9re \u00e9s parancsok v\u00e9grehajt\u00e1s\u00e1ra ir\u00e1nyul (CVE-2024-3094).","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0440\u0435\u043c\u044f \u0441\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u0438: \u0432 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438\u0437\u043e\u0449\u0440\u0451\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a | ProHoster","og:description":"\u0412 xz\/liblzma \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e SSH (\u0431\u044d\u043a\u0434\u043e\u0440) \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2024-3094).","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-31T22:25:54+00:00","article:modified_time":"2024-03-31T22:25:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=114688"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114688\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=114688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=114688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=114688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}