{"id":121356,"date":"2025-01-16T03:46:11","date_gmt":"2025-01-16T01:46:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rsync-3-4-0"},"modified":"2025-01-16T03:46:11","modified_gmt":"2025-01-16T01:46:11","slug":"rsync-3-4-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/rsync-3-4-0","title":{"rendered":"Rsync 3.4.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Utiliteta za sinhronizaciju datoteka Rsync je a\u017eurirana kako bi se eliminisalo 6 zna\u010dajnih ranjivosti. Za izvr\u0161enje napada kori\u0161\u0107enjem nekih od njih, dovoljno je anonimno povezivanje na Rsync server sa pristupom za \u010ditanje.<\/p>\n<p>Odpravljene ranljivosti:<\/p>\n<ul>\n<li><strong>CVE-2024-12084<\/strong>\u00a0\u2014 prekora\u010denje bafera putem slanja neispravnog kontrolnog zbira, \u010dija veli\u010dina prema\u0161uje 16 bajtova.<\/li>\n<li><strong>CVE-2024-12085<\/strong>\u00a0\u2014 curenje sadr\u017eaja neinicijalizovanih podataka iz steka (po jedan bajt u vreme) tokom upore\u0111ivanja kontrolnih zbirova neispravne veli\u010dine.<\/li>\n<li><strong>CVE-2024-12086<\/strong>\u00a0\u2014 omogu\u0107avanje serveru pristup sadr\u017eaju proizvoljnih datoteka iz sistema klijenta putem generisanja neispravnih komunikacionih tokova i kontrolnih zbirova tokom kopiranja datoteka sa klijenta na server (odre\u0111ivanje sadr\u017eaja bajt po bajt kroz poga\u0111anje kontrolnog zbira).<\/li>\n<li><strong>CVE-2024-12087<\/strong>\u00a0\u2014 izhod iz osnovnega imenika pri uporabi mo\u017enosti \u2014inc-recursive (ki je privzeto omogo\u010dena za mnoge zastavice). Ranljivost je posledica pomanjkljivega preverjanja simboli\u010dnih povezav in omogo\u010da zapisovanje datotek izven dolo\u010denega ciljnega imenika, ki ga je dolo\u010dil uporabnik. Napadalni\u0161ki stre\u017enik lahko to ranljivost izkoristi za napad na sistem povezanega uporabnika.<\/li>\n<li><strong>CVE-2024-12088<\/strong>\u00a0\u2014 nepravilno preverjanje simboli\u010dnih povezav, ki ka\u017eejo na druge simboli\u010dne povezave, pri uporabi mo\u017enosti \u2014safe-links. Te\u017eava omogo\u010da izhod iz osnovnega imenika in zapisovanje podatkov v katero koli datoteko v sistemu, kolikor to dopu\u0161\u010dajo pravice dostopa.<\/li>\n<li><strong>CVE-2024-12747<\/strong>\u00a0\u2014 stanje trke pri radu sa simboli\u010dkim linkovima, omogu\u0107avaju\u0107i korisniku da pove\u0107a svoje privilegije i dobije pristup privilegovanim datotekama na serveru.<\/li>\n<\/ul>\n<p> <noindex><noindex><\/p>\n<p>Ova lista ispravljenih ranjivosti preuzeta je sa sajta OpenNET: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62557\">https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62557<\/a><\/p>\n<p><\/noindex><\/noindex> <\/p>\n<p>Dr\u017ee promene u novoj verziji:<\/p>\n<ul>\n<li>configure.ac: ispravljena gre\u0161ka u proverenju IPv6 zbog nedostaju\u0107e vrednosti povratka.<\/li>\n<li>CI: preba\u010dena izrada za FreeBSD u GitHub Actions.<\/li>\n<li>Dodato je obave\u0161tenje da proxy mo\u017ee obraditi i obi\u010dan i <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sl\/ssl-sertifikat\/\"   title=\"SSL\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2320\">SSL<\/a> tok istovremeno.<\/li>\n<li>Ispravljeno upozorenje o neiskori\u0161\u0107enoj varijabli.<\/li>\n<li>A\u017euriranje popt na verziju 1.19.<\/li>\n<li>Podr\u0161ka: dodat skript install_deps_ubuntu.sh.<\/li>\n<li>CI: ispravljenih pravila za okida\u010de.<\/li>\n<li>CI: dodata izrada za Solaris.<\/li>\n<li>Detalji o putanjama poveziva\u010da za Apple silicon.<\/li>\n<li>acls: sinhronizacija tipa za orig_umask i uklanjanje upozorenja pri kompajliranju za macOS.<\/li>\n<li>Ispravljene razne poruke upozorenja prona\u0111ene u clang-16.<\/li>\n<li>rrsync: ispravljeno pogre\u0161no ime parametra u SYNOPSIS priru\u010dnika.<\/li>\n<li>Uveden PTR_SUB.<\/li>\n<li>Dodana mogu\u0107nost osnovne provjere veze putem rrsync-a.<\/li>\n<li>Ako se ne koristi ugra\u0111ena zlib, koristi se libcrypto.<\/li>\n<li>Ispravka za GCC15 (-std=gnu23): ispravljeno pretvaranje pokaziva\u010da funkcije u qsort().<\/li>\n<li>Ispravljene tipfeleru u priru\u010dniku.<\/li>\n<\/ul>\n<p>Izvor: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/opensource\/17848386\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0445 \u043d\u0438\u0445 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2024-12084\u00a0\u2014 \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442. CVE-2024-12085\u00a0\u2014 \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121356","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sl\/blog\/news\/rsync-3-4-0\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sl_SI\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Rsync 3.4.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sl\/blog\/news\/rsync-3-4-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-01-16T01:46:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-01-16T01:46:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rsync 3.4.0 | ProHoster","description":"A\u017eurirana utilita za sinhronizaciju datoteka Rsync uz uklanjanje 6 dovoljno kriti\u010dnih ranjivosti.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/rsync-3-4-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Rsync 3.4.0 | ProHoster","og:description":"\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/rsync-3-4-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-01-16T01:46:11+00:00","article:modified_time":"2025-01-16T01:46:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121356","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:39:23","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 09:43:19","updated":"2026-02-09 17:39:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/121356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=121356"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/121356\/revisions"}],"predecessor-version":[{"id":159565,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/121356\/revisions\/159565"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=121356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=121356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=121356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}