{"id":100280,"date":"2021-05-25T22:22:55","date_gmt":"2021-05-25T20:22:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypuski-nginx-1-21-0-i-nginx-1-20-1-s-ustraneniem-uyazvimosti"},"modified":"2021-05-25T22:22:55","modified_gmt":"2021-05-25T20:22:55","slug":"vypuski-nginx-1-21-0-i-nginx-1-20-1-s-ustraneniem-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypuski-nginx-1-21-0-i-nginx-1-20-1-s-ustraneniem-uyazvimosti","title":{"rendered":"L\u00ebshimet nginx 1.21.0 dhe nginx 1.20.1 me rregullimin e dob\u00ebsis\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb prezantuar versioni i par\u00eb i deg\u00ebs s\u00eb re kryesore nginx 1.21.0, n\u00eb t\u00eb cilin do t\u00eb vazhdoj\u00eb zhvillimi i mund\u00ebsive t\u00eb reja. Nj\u00ebkoh\u00ebsisht \u00ebsht\u00eb p\u00ebrgatitur nj\u00eb version korrigjues p\u00ebr deg\u00ebn stabile 1.20.1, e cila p\u00ebrfshin vet\u00ebm ndryshime q\u00eb lidhen me rregullimin e defekteve t\u00eb r\u00ebnda dhe vulnerabiliteteve. Vitin e ardhsh\u00ebm, mbi baz\u00ebn e deg\u00ebs kryesore 1.21.x do t\u00eb formohet nj\u00eb deg\u00eb stabile 1.22. <\/p>\n
N\u00eb versionet e reja \u00ebsht\u00eb eliminuar nj\u00eb vulnerabilitet (CVE-2021-23017) n\u00eb kodin p\u00ebr zgjidhjen e emrave t\u00eb hosteve n\u00eb DNS, i cili mund t\u00eb \u00e7oj\u00eb n\u00eb rr\u00ebzimin ose potencialisht ekzekutimin e kodit nga sulmuesi. Problemi shfaqet n\u00eb p\u00ebrpunimin e disa p\u00ebrgjigjeve nga serveri DNS, duke shkaktuar mbushje t\u00eb nj\u00eb bytesh n\u00eb buffer. Vulnerabiliteti shfaqet vet\u00ebm kur aktivizohet n\u00eb cil\u00ebsimet e zgjidh\u00ebsit DNS p\u00ebrmes direktiv\u00ebs \u00abresolver\u00bb. P\u00ebr t\u00eb kryer nj\u00eb sulm, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t\u00eb falsifikoj\u00eb paketat UDP nga serveri DNS ose t\u00eb ket\u00eb kontroll mbi serverin DNS. Vulnerabiliteti shfaqet q\u00eb nga l\u00ebshimi i nginx 0.6.18. P\u00ebr t\u00eb zgjidhur problemin n\u00eb l\u00ebshimet e vjetra mund t\u00eb p\u00ebrdoret nj\u00eb patch. <\/p>\n
Ndryshime n\u00eb nginx 1.21.0, q\u00eb nuk lidhen me sigurin\u00eb: <\/p>\n
N\u00eb modulit t\u00eb proxy-it t\u00eb post\u00ebs \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr \u00abpipelining\u00bb p\u00ebr d\u00ebrgimin e disa k\u00ebrkesave POP3 ose IMAP n\u00eb nj\u00eb lidhje, si dhe \u00ebsht\u00eb shtuar nj\u00eb direktiv\u00eb e re \u00abmax_errors\u00bb, e cila p\u00ebrcakton numrin maksimal t\u00eb gabimeve t\u00eb protokollit, pas t\u00eb cilave lidhja do t\u00eb mbyllet.\n
N\u00eb modulit stream \u00ebsht\u00eb shtuar parameteri \u00abfastopen\u00bb, i cili aktivizon modin \u00abTCP Fast Open\u00bb p\u00ebr soket\u00ebt q\u00eb d\u00ebgjojn\u00eb.\n
Jan\u00eb zgjidhur problemet me ekranuarjen e karaktereve speciale gjat\u00eb ridirektimit automatik me shtimin n\u00eb fund t\u00eb slasheve.\n
Jan\u00eb zgjidhur problemet me mbylljen e lidhjeve me klient\u00ebt kur p\u00ebrdoret SMTP pipelining. <\/ul>\n