{"id":121356,"date":"2025-01-16T03:46:11","date_gmt":"2025-01-16T01:46:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rsync-3-4-0"},"modified":"2025-01-16T03:46:11","modified_gmt":"2025-01-16T01:46:11","slug":"rsync-3-4-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/rsync-3-4-0","title":{"rendered":"Rsync 3.4.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A ferramenta de sincroniza\u00e7\u00e3o de arquivos Rsync foi atualizada para corrigir 6 vulnerabilidades cr\u00edticas. Para realizar um ataque utilizando algumas delas, basta uma conex\u00e3o an\u00f4nima ao servidor Rsync com acesso de leitura.<\/p>\n<p>Vulnerabilidades corrigidas:<\/p>\n<ul>\n<li><strong>CVE-2024-12084<\/strong>\u00a0\u2014 grava\u00e7\u00e3o al\u00e9m do buffer alocado devido ao envio de uma soma de verifica\u00e7\u00e3o incorreta, cuja dimens\u00e3o excede 16 bytes.<\/li>\n<li><strong>CVE-2024-12085<\/strong>\u00a0\u2014 vazamento de dados n\u00e3o inicializados da pilha (um byte por vez) ao executar opera\u00e7\u00f5es de compara\u00e7\u00e3o de somas de verifica\u00e7\u00e3o de tamanho incorreto.<\/li>\n<li><strong>CVE-2024-12086<\/strong>\u00a0\u2014 acesso do servidor ao conte\u00fado de arquivos arbitr\u00e1rios do sistema do cliente por meio da gera\u00e7\u00e3o de tokens de comunica\u00e7\u00e3o e somas de verifica\u00e7\u00e3o incorretas pelo servidor durante o processo de c\u00f3pia de arquivos do cliente para o servidor (determina\u00e7\u00e3o do conte\u00fado byte a byte por meio de tentativas de soma de verifica\u00e7\u00e3o).<\/li>\n<li><strong>CVE-2024-12087<\/strong>\u00a0\u2014 sa\u00edda do diret\u00f3rio base ao usar a op\u00e7\u00e3o \u2014inc-recursive (ativada por padr\u00e3o para muitas flags). A vulnerabilidade \u00e9 causada pela falta de verifica\u00e7\u00e3o adequada de links simb\u00f3licos, permitindo gravar arquivos fora do diret\u00f3rio de destino especificado pelo cliente. Um servidor sob controle do atacante pode explorar essa vulnerabilidade para atacar o sistema do cliente conectado.<\/li>\n<li><strong>CVE-2024-12088<\/strong>\u00a0\u2014 verifica\u00e7\u00e3o incorreta de links simb\u00f3licos que apontam para outros links simb\u00f3licos ao usar a op\u00e7\u00e3o \u2014safe-links. O problema permite sair do diret\u00f3rio base e gravar dados em qualquer arquivo no sistema, conforme permitido pelas permiss\u00f5es de acesso.<\/li>\n<li><strong>CVE-2024-12747<\/strong>\u00a0\u2014 condi\u00e7\u00e3o de corrida ao trabalhar com links simb\u00f3licos, permitindo ao usu\u00e1rio elevar suas permiss\u00f5es e acessar arquivos privilegiados no servidor.<\/li>\n<\/ul>\n<p> <noindex><noindex><\/p>\n<p>Esta lista de vulnerabilidades resolvidas foi extra\u00edda do site OpenNET: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62557\">https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62557<\/a><\/p>\n<p><\/noindex><\/noindex> <\/p>\n<p>Outras altera\u00e7\u00f5es na nova vers\u00e3o:<\/p>\n<ul>\n<li>configure.ac: corrigido erro de verifica\u00e7\u00e3o IPv6 devido \u00e0 falta de tipo de retorno.<\/li>\n<li>CI: migra\u00e7\u00e3o da constru\u00e7\u00e3o do FreeBSD para o GitHub Actions.<\/li>\n<li>Adicionado um aviso de que o proxy pode processar tanto o <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/ssl-sertifikat\/\"   title=\"SSL\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2320\">SSL<\/a> fluxo normal quanto o de<\/li>\n<li>eliminado aviso sobre vari\u00e1vel n\u00e3o utilizada.<\/li>\n<li>Atualiza\u00e7\u00e3o do popt para a vers\u00e3o 1.19.<\/li>\n<li>Suporte: adicionado script install_deps_ubuntu.sh.<\/li>\n<li>CI: corrigidas regras para triggers.<\/li>\n<li>CI: adicionada constru\u00e7\u00e3o para Solaris.<\/li>\n<li>Detalhes do caminho do linker para Apple silicon.<\/li>\n<li>acls: sincroniza\u00e7\u00e3o de tipo para orig_umask e elimina\u00e7\u00e3o de avisos de compila\u00e7\u00e3o para macOS.<\/li>\n<li>Diversos avisos encontrados no clang-16 foram corrigidos.<\/li>\n<li>rrsync: corrigido o nome incorreto do par\u00e2metro na SYNOPSIS do manual.<\/li>\n<li>Introduzido PTR_SUB.<\/li>\n<li>Adicionada a capacidade de verifica\u00e7\u00e3o b\u00e1sica de conex\u00e3o via rrsync.<\/li>\n<li>Caso a zlib embutida n\u00e3o seja utilizada, a libcrypto \u00e9 usada.<\/li>\n<li>Corre\u00e7\u00e3o para GCC15(-std=gnu23): corrigido o cast do ponteiro da fun\u00e7\u00e3o em qsort().<\/li>\n<li>Corre\u00e7\u00f5es de erros de digita\u00e7\u00e3o no manual.<\/li>\n<\/ul>\n<p>Fonte: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/opensource\/17848386\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0445 \u043d\u0438\u0445 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2024-12084\u00a0\u2014 \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442. CVE-2024-12085\u00a0\u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121356","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/rsync-3-4-0\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Rsync 3.4.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/rsync-3-4-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-01-16T01:46:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-01-16T01:46:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rsync 3.4.0 | ProHoster","description":"Atualizada a ferramenta de sincroniza\u00e7\u00e3o de arquivos Rsync, eliminando 6 vulnerabilidades bastante cr\u00edticas.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/rsync-3-4-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Rsync 3.4.0 | ProHoster","og:description":"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/rsync-3-4-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-16T01:46:11+00:00","article:modified_time":"2025-01-16T01:46:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121356","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:39:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:43:19","updated":"2026-02-09 17:39:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/121356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=121356"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/121356\/revisions"}],"predecessor-version":[{"id":159565,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/121356\/revisions\/159565"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=121356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=121356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=121356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}