{"id":100280,"date":"2021-05-25T22:22:55","date_gmt":"2021-05-25T20:22:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypuski-nginx-1-21-0-i-nginx-1-20-1-s-ustraneniem-uyazvimosti"},"modified":"2021-05-25T22:22:55","modified_gmt":"2021-05-25T20:22:55","slug":"vypuski-nginx-1-21-0-i-nginx-1-20-1-s-ustraneniem-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypuski-nginx-1-21-0-i-nginx-1-20-1-s-ustraneniem-uyazvimosti","title":{"rendered":"L\u00ebshimet nginx 1.21.0 dhe nginx 1.20.1 me rregullim t\u00eb dob\u00ebsis\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
U prezantua l\u00ebshimi i par\u00eb i deg\u00ebs kryesore t\u00eb re nginx 1.21.0, ku do t\u00eb vazhdoj\u00eb zhvillimi i mund\u00ebsive t\u00eb reja. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, \u00ebsht\u00eb p\u00ebrgatitur nj\u00eb l\u00ebshim korrigjues p\u00ebr deg\u00ebn stabile 1.20.1, ku b\u00ebhen vet\u00ebm ndryshime q\u00eb lidhen me rregullimin e gabimeve serioze dhe dob\u00ebsive. N\u00eb vitin e ardhsh\u00ebm, do t\u00eb formohet dega stabile 1.22 mbi baz\u00ebn e deg\u00ebs kryesore 1.21.x. <\/p>\n
N\u00eb versionet e reja \u00ebsht\u00eb eliminuar nj\u00eb vulnerabilitet (CVE-2021-23017) n\u00eb kodin p\u00ebr zgjidhjen e emrave t\u00eb hosteve n\u00eb DNS, i cili mund t\u00eb \u00e7oj\u00eb n\u00eb r\u00ebnien e sh\u00ebrbimit ose potencialisht n\u00eb ekzekutimin e kodit nga nj\u00eb sulmues. Problemi shfaqet gjat\u00eb p\u00ebrpunimit t\u00eb disa p\u00ebrgjigjeve nga serveri DNS, duke shkaktuar nj\u00eb mbushje t\u00eb buffer-it me nj\u00eb byte. Vulnerabiliteti shfaqet vet\u00ebm kur \u00ebsht\u00eb aktivizuar n\u00eb cil\u00ebsimet e DNS-resolver-it me direktiv\u00ebn 'resolver'. P\u00ebr t\u00eb kryer sulmin, nj\u00eb sulmues duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb falsifikuar paketa UDP nga serveri DNS ose t\u00eb fitoj\u00eb kontroll mbi serverin DNS. Vulnerabiliteti shfaqet duke filluar nga publikimi nginx 0.6.18. P\u00ebr t\u2019u zgjidhur problemi n\u00eb versionet e vjetra, mund t\u00eb p\u00ebrdoret nj\u00eb patch. <\/p>\n
Ndryshimet n\u00eb nginx 1.21.0, q\u00eb nuk lidhen me sigurin\u00eb: <\/p>\n
Moduli i proxy-t p\u00ebr post\u00eb ka shtuar mb\u00ebshtetje p\u00ebr 'pipelining' p\u00ebr d\u00ebrgimin e disa k\u00ebrkesave POP3 ose IMAP n\u00eb nj\u00eb lidhje t\u00eb vetme, si dhe \u00ebsht\u00eb shtuar nj\u00eb direktiv\u00eb e re 'max_errors', q\u00eb p\u00ebrcakton numrin maksimal t\u00eb gabimeve t\u00eb protokollit, pas t\u00eb cilave lidhja do t\u00eb mbyllet.\n
N\u00eb modul p\u00ebr stream \u00ebsht\u00eb shtuar parametrin \u201efastopen\u201c, i cili aktivizon modin \u201eTCP Fast Open\u201c p\u00ebr socket-et q\u00eb d\u00ebgjojn\u00eb.\n
Jan\u00eb zgjidhur problemet me p\u00ebrjashtimin e karaktereve speciale gjat\u00eb ridrejtimit automatik me shtimin e slashit n\u00eb fund.\n
\u00cbsht\u00eb zgjidhur problemi me mbylljen e lidhjeve me klient\u00ebt gjat\u00eb p\u00ebrdorimit t\u00eb SMTP pipelining. <\/ul>\n