{"id":183486,"date":"2026-09-27T10:53:30","date_gmt":"2026-09-27T08:53:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimosti-v-lxd-incus-flatpak-gitlab-radicle-yadre-linux-wordpress-openvpn-ntfs-3g-freerdp-cups-i-dovecot"},"modified":"2026-09-27T10:53:35","modified_gmt":"2026-09-27T08:53:35","slug":"vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot","title":{"rendered":"Zranite\u013enosti v LXD, Incus, Flatpak, GitLab, Radicle, jadre Linux, WordPress, OpenVPN, NTFS-3G, FreeRDP, CUPS a Dovecot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nieko\u013eko ned\u00e1vno zisten\u00fdch nebezpe\u010dn\u00fdch zranite\u013enost\u00ed umo\u017e\u0148uj\u00facich z\u00edska\u0165 root pr\u00edstup v syst\u00e9me alebo dosiahnu\u0165 vzdialen\u00e9 vykon\u00e1vanie k\u00f3du.    <\/p>\n<ul>\n<li class=\"l\"> 7 zranite\u013enost\u00ed v syst\u00e9me spr\u00e1vy kontajnerov LXD a 11 zranite\u013enost\u00ed vo forku Incus. Nieko\u013eko zranite\u013enost\u00ed, ozna\u010den\u00fdch ako kritick\u00e9, umo\u017e\u0148uje lok\u00e1lnym nepovolen\u00fdm pou\u017e\u00edvate\u013eom meni\u0165 ak\u00e9ko\u013evek s\u00fabory v syst\u00e9me alebo spusti\u0165 svoj k\u00f3d s pr\u00e1vami root. Zranite\u013enosti boli odstr\u00e1nen\u00e9 vo verzi\u00e1ch LXD 6.9, 5.21.8, 5.0.10 a 4.0.14, ako aj v Incus 7.5.1. Probl\u00e9my s\u00fa sp\u00f4soben\u00e9 nespr\u00e1vnym spracovan\u00edm cestov s\u00faborov, probl\u00e9mami s pr\u00e1cou so symbolick\u00fdmi odkazmi a nedostato\u010dnou kontrolou vstupu v k\u00f3de pre migr\u00e1ciu a z\u00e1lohovanie izolovan\u00fdch prostred\u00ed alebo nahr\u00e1vanie syst\u00e9mov\u00fdch obrazov:\n<ul>\n<li class=\"l\"> CVE-2026-85526 \u2014 prep\u00edsanie \u013eubovo\u013en\u00fdch s\u00faborov v syst\u00e9me pri spracovan\u00ed z\u00e1lohy, obsahuj\u00facej v subvolumes[].path cestu k bodu pripojenia vo forme \u201e..\\\/..\\\/..\\\/..\\\/etc\\\/cron.d\u201c.\n<li class=\"l\"> CVE-2026-85185 \u2014 zapisovanie a odstra\u0148ovanie \u013eubovo\u013en\u00fdch s\u00faborov pomocou ur\u010denia ciest s \u201e..\\\/\u201c v n\u00e1zvoch podriaden\u00fdch jednotiek btrfs.\n<li class=\"l\"> CVE-2026-87799 \u2014 z\u00e1pis do \u013eubovo\u013en\u00e9ho s\u00faboru v syst\u00e9me cez substit\u00faciu symbolick\u00fdch odkazov pri migr\u00e1cii. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/vps\/\"   title=\"virtu\u00e1ln\u00edch stroj\u016f\" data-wpil-keyword-link=\"linked\">virtu\u00e1ln\u00edch stroj\u016f<\/a>.\n<li class=\"l\"> CVE-2026-87798 \u2014 prekro\u010denie z\u00e1kladn\u00e9ho adres\u00e1ra virtu\u00e1lneho stroja pri rekurz\u00edvnom prenose s\u00faborov.\n<li class=\"l\"> CVE-2026-86334 \u2014 prekro\u010denie z\u00e1kladn\u00e9ho adres\u00e1ra pri exporte obrazu z vonkaj\u0161\u00edch. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/dts-los-angeles\/\"   title=\"servera\" data-wpil-keyword-link=\"linked\">servera<\/a>.\n<li class=\"l\"> CVE-2026-86335 \u2014 pr\u00edstup k s\u00fakromn\u00fdm obrazom virtu\u00e1lnych strojov in\u00fdch pou\u017e\u00edvate\u013eov.\n<li class=\"l\"> CVE-2026-97335 \u2014 ob\u00eddenie obmedzen\u00ed pr\u00edstupu k projektom.  <\/ul>\n<li class=\"l\"> Zranite\u013enosti v syst\u00e9me samostatn\u00fdch bal\u00edkov Flatpak. Probl\u00e9my boli vyrie\u0161en\u00e9 vo verzii Flatpak 1.18.1. Medzi najnebezpe\u010dnej\u0161ie zranite\u013enosti patr\u00ed:\n<ul>\n<li class=\"l\"> CVE-2026-90616 \u2014 vyu\u017e\u00edvanie symbolick\u00fdch odkazov na ob\u00eddenie sandboxovej izol\u00e1cie a z\u00edskanie pln\u00e9ho pr\u00edstupu k s\u00faborov\u00e9mu syst\u00e9mu hostite\u013ea.\n<li class=\"l\"> Zv\u00fd\u0161enie opr\u00e1vnen\u00ed na pou\u017e\u00edvate\u013ea root prostredn\u00edctvom substit\u00facie symbolick\u00e9ho odkazu (CVE nebol pridelen\u00fd);\n<li class=\"l\"> CVE-2026-9627 \u2014 zapisovanie s\u00faborov s pr\u00e1vami root cez manipul\u00e1ciu s cestami k s\u00faborom.\n<li class=\"l\"> CVE-2026-96275 \u2014 zapisovanie s\u00faborov s pr\u00e1vami root cez manipul\u00e1ciu so symbolick\u00fdmi odkazmi.\n<li class=\"l\"> CVE-2026-96276 \u2014 zapisovanie s\u00faborov s pr\u00e1vami root cez substit\u00faciu \u201e..\\\/\u201c v s\u00faborov\u00fdch cest\u00e1ch pri vykon\u00e1van\u00ed pr\u00edkazu \u201eflatpak build-init\u201c.\n<li class=\"l\"> CVE-2026-96279 \u2014 \u010d\u00edtanie \u013eubovo\u013en\u00fdch s\u00faborov v hlavnom syst\u00e9me cez vytvorenie tvrd\u00e9ho odkazu pri extrakcii arch\u00edvu OCI.\n<li class=\"l\"> CVE-2026-92162 \u2014 pr\u00edstup k s\u00faborom mimo z\u00e1kladn\u00e9ho adres\u00e1ra prostredn\u00edctvom substit\u00facie \u201e..\\\/\u201c v parametroch DeployAppstream.\n<li class=\"l\"> CVE-2026-96280 \u2014 prete\u010denie vyrovn\u00e1vacej pam\u00e4te v spracovate\u013eovi delta-aktualiz\u00e1ci\u00ed OCI na 32-bitov\u00fdch syst\u00e9moch.  <\/ul>\n<li class=\"l\"> Dve kritick\u00e9 vulnerabilitn\u00e9 v platforme pre organiz\u00e1ciu spolupr\u00e1ce GitLab, ktor\u00e9 umo\u017e\u0148uj\u00fa vzdialen\u00e9mu autentifikovan\u00e9mu pou\u017e\u00edvate\u013eovi vykona\u0165 svoj k\u00f3d na <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/dts-newyork\/\"   title=\"serveri\" data-wpil-keyword-link=\"linked\">serveri<\/a> prostredn\u00edctvom substit\u00facie \u0161peci\u00e1lne form\u00e1tovan\u00e9ho regul\u00e1rneho v\u00fdrazu v nastaveniach CI\\\/CD. Vulnerabilitn\u00e9 s\u00fa pr\u00edtomn\u00e9 v parseri regul\u00e1rnych v\u00fdrazov a s\u00fa sp\u00f4soben\u00e9 dvojit\u00fdm uvo\u013enen\u00edm pam\u00e4te (CVE-2026-89078) a prete\u010den\u00edm cel\u00e9ho \u010d\u00edsla (CVE-2026-93577). Probl\u00e9my boli odstr\u00e1nen\u00e9 vo verzi\u00e1ch 19.4.1, 19.3.3, 19.2.7.\n<li class=\"l\"> Dve kritick\u00e9 vulnerabilitn\u00e9 v sie\u0165ovom protokole, pou\u017eitom na uzloch decentralizovanej platformy pre spolupr\u00e1cu Radicle. Prv\u00e1 vulnerabilita umo\u017e\u0148uje prehliada\u0165 d\u00e1ta, ktor\u00e9 si uzly vymie\u0148aj\u00fa monitorovan\u00edm prev\u00e1dzky. Druh\u00e1 vulnerabilita umo\u017e\u0148uje fal\u0161ovanie identifik\u00e1tora uzla a pr\u00edstup k s\u00fakromn\u00fdm repozit\u00e1rom. V kombin\u00e1cii umo\u017e\u0148uj\u00fa vulnerabilitn\u00e9 extrakciu obsahu ak\u00fdchko\u013evek repozit\u00e1rov z uzlov Radicle.\n<li class=\"l\"> Vulnerabilita v jadre Linuxu, sp\u00f4soben\u00e1 pr\u00edstupom k u\u017e uvo\u013enenej pam\u00e4ti (use-after-free) v d\u00f4sledku pretekaj\u00faceho stavu v module espintcp, pou\u017eitom pre enkapsul\u00e1ciu protokolu ESP (Encapsulating Security Payload) v TCP (ESP-in-TCP, RFC 8229). Probl\u00e9m bol odstr\u00e1nen\u00fd v jadre vo febru\u00e1ri pred vydan\u00edm 7.0. Pred nieko\u013ek\u00fdmi d\u0148ami bol pre vulnerabilitu vyvinut\u00fd funk\u010dn\u00fd exploit, ktor\u00fd umo\u017e\u0148uje spusti\u0165 k\u00f3d s pr\u00e1vami root v syst\u00e9me. Funk\u010dnos\u0165 exploitu bola demon\u0161trovan\u00e1 v CentOS Stream 9 a Ubuntu 26.04 LTS.\n<li class=\"l\"> Kritick\u00e1 vulnerabilita (CVE-2026-87902) v syst\u00e9me spr\u00e1vy obsahu WordPress, ktor\u00e1 umo\u017e\u0148uje neautentifikovan\u00e9mu n\u00e1v\u0161tevn\u00edkovi str\u00e1nky vykona\u0165 PHP k\u00f3d na serveri, prostredn\u00edctvom manipul\u00e1cie so \u0161abl\u00f3nami str\u00e1nok, ak existuje na serveri s\u00fabor pearcmd.php (dostupn\u00fd v ofici\u00e1lnom docker obraze a v konfigur\u00e1cii cPanel ako predvolen\u00e9). Probl\u00e9m sa taktie\u017e prejavuje vo forku ClassicPress. Vulnerabilita je akt\u00edvne vyu\u017e\u00edvan\u00e1 \u00fato\u010dn\u00edkmi na prevzatie kontroly nad webov\u00fdmi str\u00e1nkami. Oprava bola vydan\u00e1 pre 25 vetiev WordPress, po\u010dn\u00fac 7.1.2 a kon\u010diac 4.7.37.\n<li class=\"l\"> 7 zranite\u013enost\u00ed v OpenVPN, vr\u00e1tane probl\u00e9mov sp\u00f4soben\u00fdch dvojit\u00fdm uvo\u013enen\u00edm pam\u00e4te (CVE-2026-84471), nespr\u00e1vnym escapovan\u00edm \u0161peci\u00e1lnych znakov pri spusten\u00ed pr\u00edkazov\u00e9ho interpretera (CVE-2026-84256) a jedn\u00fdm bajtov\u00fdm prete\u010den\u00edm buffera pri spracovan\u00ed DHCP mo\u017enost\u00ed (CVE-2026-81738). Probl\u00e9my boli vyrie\u0161en\u00e9 vo verzii OpenVPN 2.6.23.\n<li class=\"l\"> 8 zranite\u013enost\u00ed v bal\u00edku NTFS-3G, potenci\u00e1lne umo\u017e\u0148uj\u00facich vykonanie k\u00f3du s pr\u00e1vami root pri sprac\u00favan\u00ed \u0161peci\u00e1lne navrhnut\u00fdch oddielov alebo diskov\u00fdch obrazov s FS NTFS. V\u0161etky zranite\u013enosti s\u00fa sp\u00f4soben\u00e9 prete\u010den\u00edm buffera. Probl\u00e9my boli vyrie\u0161en\u00e9 vo verzii NTFS-3G 2026.9.18.\n<li class=\"l\"> Zranite\u013enos\u0165 vo FreeRDP, ktor\u00e1 umo\u017e\u0148uje nadviaza\u0165 RDP pripojenie s <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/dts-prohoster\/\"   title=\"serverom\" data-wpil-keyword-link=\"linked\">serverom<\/a> bez autentifik\u00e1cie. Probl\u00e9m bol vyrie\u0161en\u00fd vo verzii FreeRDP 3.31.0.\n<li class=\"l\"> Zranite\u013enos\u0165 (CVE-2026-87766) v n\u00e1stroji na organiz\u00e1ciu pr\u00e1ce izolovan\u00fdch prostred\u00ed Bubblewrap, ktor\u00e1 umo\u017e\u0148uje zapisova\u0165 s\u00fabory mimo sandboxov\u00e9ho prostredia pri nastaven\u00ed kontajnera prostredn\u00edctvom manipul\u00e1cie so symbolick\u00fdmi odkazmi.\n<li class=\"l\"> Bola zverejnen\u00e1 exploita k zranite\u013enosti v tla\u010dovom serveri CUPS, ktor\u00e1 umo\u017e\u0148uje lok\u00e1lnemu pou\u017e\u00edvate\u013eovi z\u00edska\u0165 pr\u00e1va root v syst\u00e9me cez prep\u00edsanie s\u00faboru \/etc\/cups\/cups-files.conf (cez ur\u010denie tohto s\u00faboru ako URI tla\u010diarne) a nahradenie volania cups-exec. Aktualiz\u00e1cia CUPS zatia\u013e nebola vydan\u00e1.\n<li class=\"l\"> Pr\u00edstup k u\u017e uvo\u013enenej pam\u00e4ti (CVE-2026-42007) na IMAP serveri Dovecot, ktor\u00fd umo\u017e\u0148uje autentifikovan\u00e9mu pou\u017e\u00edvate\u013eovi dosiahnu\u0165 vykonanie svojho k\u00f3du na serveri prostredn\u00edctvom pou\u017eitia \u0161peci\u00e1lne navrhnut\u00e9ho Sieve skriptu. Zranite\u013enos\u0165 bola vyrie\u0161en\u00e1 vo verzii Dovecot 2.4.5.      <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66350\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 LXD \u0438 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u043e\u0440\u043a\u0435 Incus. \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 LXD 6.9, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183486","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LXD, Incus, Flatpak, GitLab, Radicle, \u044f\u0434\u0440\u0435 Linux, WordPress, OpenVPN, NTFS-3G, FreeRDP, CUPS \u0438 Dovecot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-09-27T08:53:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-27T08:53:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranite\u013enosti v LXD, Incus, Flatpak, GitLab, Radicle, jadre Linux, WordPress, OpenVPN, NTFS-3G, FreeRDP, CUPS a Dovecot | ProHoster","description":"Nieko\u013eko ned\u00e1vno zisten\u00fdch nebezpe\u010dn\u00fdch zranite\u013enost\u00ed umo\u017e\u0148uj\u00facich z\u00edska\u0165 root pr\u00edstup v syst\u00e9me alebo dosiahnu\u0165 vzdialen\u00e9 vykon\u00e1vanie k\u00f3du.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LXD, Incus, Flatpak, GitLab, Radicle, \u044f\u0434\u0440\u0435 Linux, WordPress, OpenVPN, NTFS-3G, FreeRDP, CUPS \u0438 Dovecot | ProHoster","og:description":"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/vulnerabilities-in-lxd-incus-flatpak-gitlab-radicle-the-linux-kernel-wordpress-openvpn-ntfs-3g-freerdp-cups-and-dovecot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-09-27T08:53:30+00:00","article:modified_time":"2026-09-27T08:53:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/183486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=183486"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/183486\/revisions"}],"predecessor-version":[{"id":183487,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/183486\/revisions\/183487"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=183486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=183486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=183486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}