{"id":183486,"date":"2026-09-27T10:53:30","date_gmt":"2026-09-27T08:53:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimosti-v-lxd-incus-flatpak-gitlab-radicle-yadre-linux-wordpress-openvpn-ntfs-3g-freerdp-cups-i-dovecot"},"modified":"2026-09-27T10:53:35","modified_gmt":"2026-09-27T08:53:35","slug":"vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot","title":{"rendered":"Biztons\u00e1gi r\u00e9sek az LXD, Incus, Flatpak, GitLab, Radicle, Linux kernel, WordPress, OpenVPN, NTFS-3G, FreeRDP, CUPS \u00e9s Dovecot rendszerekben.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>T\u00f6bb, nemr\u00e9g felfedezett vesz\u00e9lyes sebezhet\u0151s\u00e9g, amely root-hozz\u00e1f\u00e9r\u00e9st vagy t\u00e1voli k\u00f3dv\u00e9grehajt\u00e1st tesz lehet\u0151v\u00e9 a rendszerben.    <\/p>\n<ul>\n<li class=\"l\"> 7 s\u00e9r\u00fcl\u00e9kenys\u00e9g a LXD kont\u00e9nerkezel\u0151 rendszer\u00e9ben \u00e9s 11 s\u00e9r\u00fcl\u00e9kenys\u00e9g az Incus forkban. N\u00e9h\u00e1ny s\u00e9r\u00fcl\u00e9kenys\u00e9get kritikusnak jel\u00f6ltek, amelyek lehet\u0151v\u00e9 teszik a helyi, nem privilegiz\u00e1lt felhaszn\u00e1l\u00f3k sz\u00e1m\u00e1ra, hogy megv\u00e1ltoztassanak b\u00e1rmely f\u00e1jlt a rendszerben, vagy k\u00f3dot futtassanak root jogosults\u00e1gokkal. A s\u00e9r\u00fcl\u00e9kenys\u00e9geket az LXD 6.9, 5.21.8, 5.0.10 \u00e9s 4.0.14 kiad\u00e1sokban, valamint az Incus 7.5.1-ben jav\u00edtott\u00e1k ki. A probl\u00e9m\u00e1k a f\u00e1jlok el\u00e9r\u00e9si \u00fatj\u00e1nak helytelen kezel\u00e9s\u00e9b\u0151l, a szimbolikus hivatkoz\u00e1sokkal kapcsolatos probl\u00e9m\u00e1kb\u00f3l \u00e9s a bemeneti adatok ellen\u0151rz\u00e9s\u00e9nek hi\u00e1ny\u00e1b\u00f3l erednek az izol\u00e1lt k\u00f6rnyezetek migr\u00e1l\u00e1sa \u00e9s biztons\u00e1gi ment\u00e9se vagy a rendszerk\u00e9pek bet\u00f6lt\u00e9se sor\u00e1n:\n<ul>\n<li class=\"l\"> CVE-2026-85526 \u2014 tetsz\u0151leges f\u00e1jlok fel\u00fcl\u00edr\u00e1sa a rendszerben egy biztons\u00e1gi ment\u00e9s feldolgoz\u00e1sa sor\u00e1n, amely a subvolumes[].path mez\u0151ben az \"..\\\/..\\\/..\\\/..\\\/etc\\\/cron.d\" t\u00edpus\u00fa csatol\u00e1si pont \u00fatvonalat tartalmaz.\n<li class=\"l\"> CVE-2026-85185 \u2014 tetsz\u0151leges f\u00e1jlok \u00edr\u00e1sa \u00e9s t\u00f6rl\u00e9se a btrfs almapp\u00e1iban az \"..\\\/\" \u00fatvonalak megad\u00e1s\u00e1val.\n<li class=\"l\"> CVE-2026-87799 \u2014 tetsz\u0151leges f\u00e1jlok \u00edr\u00e1sa a rendszerbe szimbolikus linkek behelyettes\u00edt\u00e9se r\u00e9v\u00e9n a migr\u00e1ci\u00f3 sor\u00e1n. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/vps\/\"   title=\"virtu\u00e1lis g\u00e9pekhez\" data-wpil-keyword-link=\"linked\">virtu\u00e1lis g\u00e9pekhez<\/a>.\n<li class=\"l\"> CVE-2026-87798 \u2014 a virtu\u00e1lis g\u00e9p alapk\u00f6nyvt\u00e1r\u00e1n k\u00edv\u00fclre l\u00e9p\u00e9s f\u00e1jlok rekurz\u00edv \u00e1tkonvert\u00e1l\u00e1sa sor\u00e1n.\n<li class=\"l\"> CVE-2026-86334 \u2014 a virtu\u00e1lis k\u00e9p export\u00e1l\u00e1sa sor\u00e1n a sz\u00fcl\u0151 k\u00f6nyvt\u00e1ron k\u00edv\u00fcli l\u00e9p\u00e9s. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/server\/dts-los-angeles\/\"   title=\"a szerver\" data-wpil-keyword-link=\"linked\">a szerver<\/a>.\n<li class=\"l\"> CVE-2026-86335 \u2014 m\u00e1s felhaszn\u00e1l\u00f3k priv\u00e1t virtu\u00e1lis k\u00e9peihez val\u00f3 hozz\u00e1f\u00e9r\u00e9s.\n<li class=\"l\"> CVE-2026-97335 \u2014 a projektekhez val\u00f3 hozz\u00e1f\u00e9r\u00e9si korl\u00e1toz\u00e1sok megker\u00fcl\u00e9se.  <\/ul>\n<li class=\"l\"> S\u00e9r\u00fcl\u00e9kenys\u00e9gek a Flatpak \u00f6n\u00e1ll\u00f3 csomagrendszer\u00e9ben. A probl\u00e9m\u00e1kat a Flatpak 1.18.1 verzi\u00f3j\u00e1ban jav\u00edtott\u00e1k ki. A legvesz\u00e9lyesebb s\u00e9r\u00fcl\u00e9kenys\u00e9gek k\u00f6z\u00e9 tartozik:\n<ul>\n<li class=\"l\"> CVE-2026-90616 \u2014 szimbolikus linkek haszn\u00e1lata a sandbox-izol\u00e1ci\u00f3 megker\u00fcl\u00e9s\u00e9re \u00e9s a gazda f\u00e1jlrendszer teljes hozz\u00e1f\u00e9r\u00e9s\u00e9nek megszerz\u00e9s\u00e9re;\n<li class=\"l\"> Jogosults\u00e1gok emel\u00e9se root felhaszn\u00e1l\u00f3ra szimbolikus hivatkoz\u00e1s substit\u00faci\u00f3ja r\u00e9v\u00e9n (CVE nem rendelve);\n<li class=\"l\"> CVE-2026-9627 \u2014 f\u00e1jlok \u00edr\u00e1sa root jogosults\u00e1gokkal a f\u00e1jlok \u00fatvonalainak manipul\u00e1l\u00e1s\u00e1val;\n<li class=\"l\"> CVE-2026-96275 \u2014 f\u00e1jlok \u00edr\u00e1sa root jogosults\u00e1gokkal szimbolikus linkek manipul\u00e1l\u00e1s\u00e1val;\n<li class=\"l\"> CVE-2026-96276 \u2014 f\u00e1jlok \u00edr\u00e1sa root jogosults\u00e1gokkal az \"..\\\/\" behelyettes\u00edt\u00e9s\u00e9vel a f\u00e1jlok \u00fatvonal\u00e1ba a \"flatpak build-init\" parancs v\u00e9grehajt\u00e1sa sor\u00e1n;\n<li class=\"l\"> CVE-2026-96279 \u2014 tetsz\u0151leges f\u00e1jlok olvas\u00e1sa a f\u0151 rendszerb\u0151l kem\u00e9ny link l\u00e9trehoz\u00e1s\u00e1val egy OCI archive kicsomagol\u00e1sakor.\n<li class=\"l\"> CVE-2026-92162 \u2014 f\u00e1jlok el\u00e9r\u00e9se az alapk\u00f6nyvt\u00e1ron k\u00edv\u00fcl az \"..\\\/\" behelyettes\u00edt\u00e9s\u00e9vel a DeployAppstream param\u00e9terekben.\n<li class=\"l\"> CVE-2026-96280 \u2014 puffert\u00falcsordul\u00e1s az OCI delta-friss\u00edt\u00e9si kezel\u0151j\u00e9ben 32 bites rendszereken.  <\/ul>\n<li class=\"l\"> K\u00e9t kritikus s\u00e9r\u00fcl\u00e9kenys\u00e9g a GitLab egy\u00fcttm\u0171k\u00f6d\u00e9si fejleszt\u00e9si platformj\u00e1n, amely lehet\u0151v\u00e9 teszi a t\u00e1voli azonos\u00edtott felhaszn\u00e1l\u00f3 sz\u00e1m\u00e1ra, hogy saj\u00e1t k\u00f3dj\u00e1t v\u00e9grehajtsa a <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/server\/dts-newyork\/\"   title=\"szerveren\" data-wpil-keyword-link=\"linked\">szerveren<\/a> CI\/CD be\u00e1ll\u00edt\u00e1sainak speci\u00e1lisan form\u00e1zott regul\u00e1ris kifejez\u00e9sekkel val\u00f3 behelyettes\u00edt\u00e9s\u00e9vel. A s\u00e9r\u00fcl\u00e9kenys\u00e9gek a regul\u00e1ris kifejez\u00e9sek elemz\u0151j\u00e9ben tal\u00e1lhat\u00f3k, \u00e9s a mem\u00f3ria dupl\u00e1n felszabad\u00edt\u00e1s\u00e1nak (CVE-2026-89078) \u00e9s a teljes sz\u00e1m t\u00falcsordul\u00e1s\u00e1nak (CVE-2026-93577) k\u00f6vetkezm\u00e9nyei. A probl\u00e9m\u00e1k a 19.4.1, 19.3.3, 19.2.7 verzi\u00f3kban lettek jav\u00edtva.\n<li class=\"l\"> K\u00e9t kritikus s\u00e9r\u00fcl\u00e9kenys\u00e9g a Radicle decentraliz\u00e1lt egy\u00fcttm\u0171k\u00f6d\u00e9si fejleszt\u00e9si platformj\u00e1nak h\u00e1l\u00f3zati protokollj\u00e1ban. Az els\u0151 s\u00e9r\u00fcl\u00e9kenys\u00e9g lehet\u0151v\u00e9 teszi az adatok megtekint\u00e9s\u00e9t, amelyeket a csom\u00f3pontok forgalomfigyel\u00e9s r\u00e9v\u00e9n cser\u00e9lnek. A m\u00e1sodik s\u00e9r\u00fcl\u00e9kenys\u00e9g lehet\u0151s\u00e9get ad a csom\u00f3pont azonos\u00edt\u00f3j\u00e1nak hamis\u00edt\u00e1s\u00e1ra \u00e9s a priv\u00e1t t\u00e1rol\u00f3khoz val\u00f3 hozz\u00e1f\u00e9r\u00e9s megszerz\u00e9s\u00e9re. A s\u00e9r\u00fcl\u00e9kenys\u00e9gek kombin\u00e1ci\u00f3ja lehet\u0151v\u00e9 teszi b\u00e1rmely t\u00e1rol\u00f3 tartalm\u00e1nak kinyer\u00e9s\u00e9t a Radicle csom\u00f3pontjain.\n<li class=\"l\"> S\u00e9r\u00fcl\u00e9kenys\u00e9g a Linux kernelben, amely a m\u00e1r felszabad\u00edtott mem\u00f3ria (use-after-free) el\u00e9r\u00e9s\u00e9b\u0151l ad\u00f3dik egy versenyhelyzet miatt az espintcp modulban, ami az ESP (Encapsulating Security Payload) TCP-be (ESP-in-TCP, RFC 8229) val\u00f3 be\u00e1gyaz\u00e1s\u00e1\u00e9rt felel\u0151s. A probl\u00e9ma febru\u00e1rban ker\u00fcltek jav\u00edt\u00e1sra a kernelben a 7.0 verzi\u00f3 kiad\u00e1sa el\u0151tt. N\u00e9h\u00e1ny nappal ezel\u0151tt munkak\u00e9pes exploit k\u00e9sz\u00fclt a s\u00e9r\u00fcl\u00e9kenys\u00e9ghez, amely lehet\u0151v\u00e9 teszi a root jogosults\u00e1g\u00fa k\u00f3d v\u00e9grehajt\u00e1s\u00e1t a rendszeren. Az exploit m\u0171k\u00f6d\u00e9s\u00e9t a CentOS Stream 9 \u00e9s az Ubuntu 26.04 LTS eset\u00e9ben is bemutatt\u00e1k.\n<li class=\"l\"> Kritikus s\u00e9r\u00fcl\u00e9kenys\u00e9g (CVE-2026-87902) a WordPress tartalomkezel\u0151 rendszerben, amely lehet\u0151v\u00e9 teszi, hogy egy azonos\u00edtatlan l\u00e1togat\u00f3 PHP k\u00f3dot hajtson v\u00e9gre a szerveren, az oldalsablonok manipul\u00e1l\u00e1s\u00e1n kereszt\u00fcl, ha a serveren tal\u00e1lhat\u00f3 a pearcmd.php f\u00e1jl (el\u00e9rhet\u0151 az hivatalos docker-k\u00e9pben \u00e9s a cPanel alap\u00e9rtelmezett konfigur\u00e1ci\u00f3j\u00e1ban). A probl\u00e9ma a ClassicPress forkban is megjelenik. A s\u00e9r\u00fcl\u00e9kenys\u00e9get a t\u00e1mad\u00f3k akt\u00edvan kihaszn\u00e1lj\u00e1k weboldalak ir\u00e1ny\u00edt\u00e1s\u00e1nak megszerz\u00e9s\u00e9re. A jav\u00edt\u00e1st a WordPress 25 \u00e1gain adt\u00e1k ki, a 7.1.2-t\u0151l a 4.7.37-ig.\n<li class=\"l\"> H\u00e9t s\u00e9r\u00fcl\u00e9kenys\u00e9g az OpenVPN-ben, k\u00f6z\u00f6tt\u00fck olyan probl\u00e9m\u00e1k, amelyek a mem\u00f3ria dupl\u00e1n felszabad\u00edt\u00e1sa (CVE-2026-84471), a speci\u00e1lis karakterek helytelen escape-el\u00e9se parancssori \u00e9rtelmez\u00e9s k\u00f6zben (CVE-2026-84256) \u00e9s egy b\u00e1jtbufor t\u00falt\u00f6lt\u00e9se a DHCP opci\u00f3k elemz\u00e9sakor (CVE-2026-81738) miatt \u00e1llnak fenn. A probl\u00e9m\u00e1kat az OpenVPN 2.6.23 verzi\u00f3j\u00e1ban jav\u00edtott\u00e1k.\n<li class=\"l\"> 8 sebezhet\u0151s\u00e9g tal\u00e1lhat\u00f3 az NTFS-3G csomagban, amelyek potenci\u00e1lisan lehet\u0151v\u00e9 teszik a root jogosults\u00e1gokkal val\u00f3 k\u00f3dv\u00e9grehajt\u00e1st speci\u00e1lisan form\u00e1zott part\u00edci\u00f3k vagy NTFS f\u00e1jlrendszerrel rendelkez\u0151 lemezk\u00e9pek feldolgoz\u00e1sa sor\u00e1n. Minden sebezhet\u0151s\u00e9g puffert\u00falt\u00f6lt\u00e9s okozta. A probl\u00e9m\u00e1kat az NTFS-3G 2026.9.18-as verzi\u00f3j\u00e1ban jav\u00edtott\u00e1k.\n<li class=\"l\"> Sebezhet\u0151s\u00e9g a FreeRDP-ben, amely lehet\u0151v\u00e9 teszi RDP kapcsolat l\u00e9trehoz\u00e1s\u00e1t <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/server\/dts-prohoster\/\"   title=\"szerverrel\" data-wpil-keyword-link=\"linked\">szerverrel<\/a> hiteles\u00edt\u00e9s n\u00e9lk\u00fcl. A probl\u00e9ma megoldva a FreeRDP 3.31.0-\u00e1s kiad\u00e1s\u00e1ban.\n<li class=\"l\"> Sebezhet\u0151s\u00e9g (CVE-2026-87766) a Bubblewrap izol\u00e1lt k\u00f6rnyezetek kezel\u00e9s\u00e9re szolg\u00e1l\u00f3 eszk\u00f6zt\u00e1r\u00e1ban, amely lehet\u0151v\u00e9 teszi, hogy f\u00e1jlokat \u00edrjanak a sandbox k\u00f6rnyezeten k\u00edv\u00fcl a kont\u00e9ner be\u00e1ll\u00edt\u00e1sa sor\u00e1n szimbolikus hivatkoz\u00e1sok manipul\u00e1l\u00e1s\u00e1val.\n<li class=\"l\"> Kihelyezt\u00e9k a CUPS nyomtat\u00f3szerver sebezhet\u0151s\u00e9g\u00e9vel kapcsolatos exploitot, amely lehet\u0151v\u00e9 teszi a helyi felhaszn\u00e1l\u00f3 sz\u00e1m\u00e1ra, hogy root jogosults\u00e1gokat szerezzen a rendszeren azzal, hogy fel\u00fcl\u00edrja a \/etc\/cups\/cups-files.conf f\u00e1jlt (a fenti f\u00e1jl nyomtat\u00f3i URI-k\u00e9nt val\u00f3 megad\u00e1s\u00e1val) \u00e9s felv\u00e1ltja a cups-exec h\u00edv\u00e1s\u00e1t. A CUPS friss\u00edt\u00e9se m\u00e9g nem ker\u00fclt kiad\u00e1sra.\n<li class=\"l\"> Felbukkan\u00e1s egy m\u00e1r felszabad\u00edtott mem\u00f3ria (CVE-2026-42007) eset\u00e9n a Dovecot IMAP szerverben, amely lehet\u0151v\u00e9 teszi az azonos\u00edtott felhaszn\u00e1l\u00f3 sz\u00e1m\u00e1ra, hogy saj\u00e1t k\u00f3dj\u00e1t v\u00e9grehajtsa a szerveren egy k\u00fcl\u00f6n\u00f6sen megform\u00e1zott Sieve szkript haszn\u00e1lat\u00e1val. A sebezhet\u0151s\u00e9g a Dovecot 2.4.5-\u00f6s kiad\u00e1s\u00e1ban ker\u00fclt jav\u00edt\u00e1sra.      <\/ul>\n<p>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66350\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 LXD \u0438 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u043e\u0440\u043a\u0435 Incus. \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 LXD 6.9, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183486","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LXD, Incus, Flatpak, GitLab, Radicle, \u044f\u0434\u0440\u0435 Linux, WordPress, OpenVPN, NTFS-3G, FreeRDP, CUPS \u0438 Dovecot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-09-27T08:53:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-27T08:53:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sebezhet\u0151s\u00e9gek az LXD, Incus, Flatpak, GitLab, Radicle, Linux kernel, WordPress, OpenVPN, NTFS-3G, FreeRDP, CUPS \u00e9s Dovecot eset\u00e9ben | ProHoster","description":"T\u00f6bb, nemr\u00e9g felfedezett vesz\u00e9lyes sebezhet\u0151s\u00e9g, amely root-hozz\u00e1f\u00e9r\u00e9st vagy t\u00e1voli k\u00f3dv\u00e9grehajt\u00e1st tesz lehet\u0151v\u00e9 a rendszerben.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LXD, Incus, Flatpak, GitLab, Radicle, \u044f\u0434\u0440\u0435 Linux, WordPress, OpenVPN, NTFS-3G, FreeRDP, CUPS \u0438 Dovecot | ProHoster","og:description":"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-09-27T08:53:30+00:00","article:modified_time":"2026-09-27T08:53:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=183486"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183486\/revisions"}],"predecessor-version":[{"id":183487,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/183486\/revisions\/183487"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=183486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=183486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=183486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}