N\u00eb shumic\u00ebn e aplikacioneve klient p\u00ebr platform\u00ebn e komunikimeve t\u00eb decentralizuara Matrix jan\u00eb identifikuar dob\u00ebsi (CVE-2021-40823, CVE-2021-40824) q\u00eb lejojn\u00eb t\u00eb merret informacion mbi \u00e7el\u00ebsat e p\u00ebrdorur p\u00ebr d\u00ebrgimin e mesazheve n\u00eb bisedat me enkriptim end-to-end (E2EE). Nj\u00eb sulmues, duke kompromentuar nj\u00eb nga p\u00ebrdoruesit e bised\u00ebs, mund t\u00eb zb\u00ebrthej\u00eb mesazhet q\u00eb ishin d\u00ebrguar m\u00eb par\u00eb k\u00ebtij p\u00ebrdoruesi nga aplikacionet klient t\u00eb cenueshme. <\/p>\n
P\u00ebr t\u00eb shfryt\u00ebzuar me sukses dob\u00ebsit\u00eb, k\u00ebrkohet akses n\u00eb llogarin\u00eb e marr\u00ebsit t\u00eb mesazheve. Aksi mund t\u00eb sigurohet si p\u00ebrmes rrjedhjes s\u00eb parametrave t\u00eb llogaris\u00eb, ashtu edhe p\u00ebrmes hackimit t\u00eb serverit Matrix, me t\u00eb cilin lidhet p\u00ebrdoruesi. Dob\u00ebsit\u00eb paraqesin rrezik m\u00eb t\u00eb madh p\u00ebr p\u00ebrdoruesit e dhomave t\u00eb bisedave t\u00eb enkriptura, t\u00eb cilat jan\u00eb lidhur me server\u00ebt Matrix n\u00ebn kontrollin e keqb\u00ebr\u00ebsve. Administrator\u00ebt e till\u00eb server\u00ebsh<\/a> munden t\u00eb p\u00ebrpiqen t\u00eb paraqiten si p\u00ebrdorues t\u00eb serverit p\u00ebr t\u00eb kapur mesazhet q\u00eb d\u00ebrgohen n\u00eb biseda nga aplikacionet klient t\u00eb cenueshme. <\/p>\n Dob\u00ebsit\u00eb shkaktohen nga gabimet logjike n\u00eb realizimet e mekanizmit t\u00eb ofrimit t\u00eb aksesit t\u00eb ri ndaj \u00e7el\u00ebsave, q\u00eb jan\u00eb propozuar n\u00eb matrix-js-sdk < 12.4.1 (CVE-2021-40823), matrix-android-sdk2 < 1.2.2 (CVE-2021-40824), matrix-rust-sdk < 0.4.0, FamedlySDK < 0.5.0 dhe Nheko \u2264 0.8.2. Realizimet q\u00eb p\u00ebrdorin bibliotekat matrix-ios-sdk, matrix-nio dhe libolm nuk jan\u00eb t\u00eb preku nga k\u00ebto dob\u00ebsi. <\/p>\n Prandaj, dob\u00ebsit\u00eb shfaqen n\u00eb t\u00eb gjitha aplikacionet q\u00eb kan\u00eb p\u00ebrfituar nga kodi problematik dhe nuk prekin drejtp\u00ebrdrejt protokollet Matrix dhe Olm\/Megolm. N\u00eb ve\u00e7anti, problemi prek klientin kryesor Matrix, Element (dhe m\u00eb par\u00eb Riot) p\u00ebr Web, sisteme desktop dhe Android, si dhe aplikacione t\u00eb tjera klient dhe biblioteka t\u00eb jashtme, duke p\u00ebrfshir\u00eb FluffyChat, Nheko, Cinny dhe SchildiChat. Problemi nuk shfaqet n\u00eb aplikacionin zyrtar p\u00ebr platform\u00ebn iOS, as n\u00eb aplikacionet Chatty, Hydrogen, mautrix, purple-matrix dhe Syphon. <\/p>\n Dob\u00ebsit\u00eb jan\u00eb identifikuar gjat\u00eb auditi t\u00eb siguris\u00eb s\u00eb klientit Element. Rregullimet tashm\u00eb jan\u00eb l\u00ebshuar p\u00ebr t\u00eb gjitha klient\u00ebt e prekur. P\u00ebrdoruesit rekomandohen ta instalojn\u00eb menj\u00ebher\u00eb p\u00ebrdit\u00ebsimin, dhe derisa ta instalojn\u00eb, t\u00eb kalojn\u00eb klient\u00ebt n\u00eb modalitet offline. D\u00ebshmi p\u00ebr shfryt\u00ebzimin e k\u00ebtyre dob\u00ebsive para publikimit t\u00eb rregullimeve nuk ka pasur. Sipas log\u00ebve standard t\u00eb klientit dhe server\u00eb<\/a> \u00cbsht\u00eb e pamundur t\u00eb p\u00ebrcaktohet fakti i nj\u00eb sulmi, por pasi p\u00ebr sulmin k\u00ebrkohet komprometimi i llogaris\u00eb, administratoret mund t\u00eb analizojn\u00eb pranin\u00eb e hyrjeve t\u00eb dyshimta n\u00ebp\u00ebrmjet log\u00ebve t\u00eb autentifikimit n\u00eb serverat e tyre, nd\u00ebrsa p\u00ebrdoruesit mund t\u00eb verifikojn\u00eb list\u00ebn e pajisjeve t\u00eb lidhura me llogarin\u00eb e tyre p\u00ebr rinovimet e fundit dhe ndryshimin e statusit t\u00eb besueshm\u00ebris\u00eb. <\/p>\n Mekanikshi i riaktivizimit t\u00eb \u00e7el\u00ebsave (key sharing), n\u00eb zbatimin e t\u00eb cilit jan\u00eb gjetur dob\u00ebsi, lejon klientin, i cili nuk ka \u00e7el\u00ebset p\u00ebr t\u00eb dekriptuar mesazhin, t\u00eb k\u00ebrkoj\u00eb \u00e7el\u00ebsat nga pajisja d\u00ebrguese ose pajisjet e tjera t\u00eb tij. P\u00ebr shembull, nj\u00eb mund\u00ebsi e till\u00eb \u00ebsht\u00eb e nevojshme p\u00ebr t\u00eb siguruar dekriptim t\u00eb mesazheve t\u00eb vjetra n\u00eb nj\u00eb pajisje t\u00eb re t\u00eb p\u00ebrdoruesit ose n\u00eb rast humbjeje t\u00eb \u00e7el\u00ebsave q\u00eb p\u00ebrdoruesi kishte. Specifikimi i protokollit parashikon q\u00eb p\u00ebr defekt t\u00eb mos p\u00ebrgjigjet n\u00eb k\u00ebrkesat p\u00ebr \u00e7el\u00ebsa dhe t'i d\u00ebrgoj\u00eb ato automatikisht vet\u00ebm pajisjeve t\u00eb verifikuara t\u00eb t\u00eb nj\u00ebjtit p\u00ebrdorues. Fatkeq\u00ebsisht, n\u00eb zbatimet praktike, ky k\u00ebrkes\u00eb nuk \u00ebsht\u00eb siguruar dhe k\u00ebrkesat p\u00ebr d\u00ebrgimin e \u00e7el\u00ebsave jan\u00eb trajtuar pa identifikimin e duhur t\u00eb pajisjes. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 Matrix \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2021-40823, CVE-2021-40824), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043a\u043b\u044e\u0447\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u0447\u0430\u0442\u0430\u0445 \u0441\u043e \u0441\u043a\u0432\u043e\u0437\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c (E2EE). \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0447\u0430\u0442\u0430, \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f, \u0440\u0430\u043d\u0435\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101267","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsit\u00eb n\u00eb klient\u00ebt Matrix q\u00eb lejojn\u00eb zbulimin e \u00e7el\u00ebsave t\u00eb enkriptimit t\u00eb plot\u00eb | ProHoster","description":"N\u00eb shumic\u00ebn e aplikacioneve klient p\u00ebr platform\u00ebn e komunikimeve dekentralizuar Matrix jan\u00eb identifikuar dob\u00ebsi (CVE-2021-40823, CVE-2021-40824), t\u00eb cilat lejojn\u00eb marrjen e informacionit mbi \u00e7el\u00ebsat e p\u00ebrdorur p\u00ebr transferim.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-klientah-matrix-pozvolyayushhie-raskryt-klyuchi-skvoznogo-shifrovaniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 Matrix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f | ProHoster","og:description":"\u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 Matrix \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2021-40823, CVE-2021-40824), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043a\u043b\u044e\u0447\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-klientah-matrix-pozvolyayushhie-raskryt-klyuchi-skvoznogo-shifrovaniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-14T14:22:48+00:00","article:modified_time":"2021-09-14T14:22:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101267","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-14 14:28:26","updated":"2026-02-22 15:30:28","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101267","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=101267"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101267\/revisions"}],"predecessor-version":[{"id":162276,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101267\/revisions\/162276"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=101267"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=101267"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=101267"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"