{"id":102953,"date":"2022-01-13T15:37:33","date_gmt":"2022-01-13T13:37:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d0%b8-%d0%b2-systemd-flatpak-samba-freerdp-clamav-node-js"},"modified":"2022-01-13T15:37:33","modified_gmt":"2022-01-13T13:37:33","slug":"uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","title":{"rendered":"\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>N\u00eb utilitarin systemd-tmpfiles, pjes\u00eb e systemd, u identifikua nj\u00eb vulnerabilitet (CVE-2021-3997) q\u00eb lejon nj\u00eb rekurs shkresor t\u00eb pakontrolluar. Ky problem mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb organizuar nj\u00eb refuzim sh\u00ebrbimi gjat\u00eb ngarkimit t\u00eb sistemit duke krijuar nj\u00eb num\u00ebr t\u00eb madh katalog\u00ebsh t\u00eb thell\u00eb n\u00eb \/tmp. Nj\u00eb zgjidhje p\u00ebr k\u00ebt\u00eb \u00e7\u00ebshtje \u00ebsht\u00eb ofruar n\u00eb form\u00ebn e nj\u00eb patches. P\u00ebrdit\u00ebsime t\u00eb pakove q\u00eb zgjidhin k\u00ebt\u00eb problem jan\u00eb propozuar n\u00eb Ubuntu dhe SUSE, por ende nuk jan\u00eb t\u00eb disponueshme n\u00eb Debian, RHEL dhe Fedora (zgjidhjet jan\u00eb n\u00eb faz\u00ebn e testimit).     <\/p>\n<p>\u041f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0442\u044b\u0441\u044f\u0447 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 &#171;systemd-tmpfiles &#8212;remove&#187; \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0430\u0432\u0430\u0440\u0438\u0439\u043d\u043e\u043c\u0443 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u0438\u0437-\u0437\u0430 \u0438\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u044f \u0441\u0442\u0435\u043a\u0430. \u041e\u0431\u044b\u0447\u043d\u043e \u0443\u0442\u0438\u043b\u0438\u0442\u0430 systemd-tmpfiles \u0432 \u043e\u0434\u043d\u043e\u043c \u0432\u044b\u0437\u043e\u0432\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 (&#171;systemd-tmpfiles &#8212;create &#8212;remove &#8212;boot &#8212;exclude-prefix=\/dev&#187;), \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u043d\u0430\u0447\u0430\u043b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435, \u0430 \u043f\u043e\u0442\u043e\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435, \u0442.\u0435. \u043a\u0440\u0430\u0445 \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u044b \u0432\u0430\u0436\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0444\u0430\u0439\u043b\u044b, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0432 \/usr\/lib\/tmpfiles.d\/*.conf.      <\/p>\n<p>Po ashtu, \u00ebsht\u00eb p\u00ebrmendur nj\u00eb skenar sulmi m\u00eb i rreziksh\u00ebm ndaj Ubuntu 21.04: pasi p\u00ebr shkak t\u00eb crash-it t\u00eb systemd-tmpfiles, nuk krijohet skedari \/run\/lock\/subsys, dhe katalogu \/run\/lock lejon shkrim nga t\u00eb gjith\u00eb p\u00ebrdoruesit, nj\u00eb sulmues mund t\u00eb krijoj\u00eb katalogun \/run\/lock\/subsys n\u00ebn identifikuesin e tij dhe, p\u00ebrmes krijimit t\u00eb lidhjeve simbolike q\u00eb prekin skedar\u00ebt e bllokimit nga proceset sistemike, t\u00eb organizoj\u00eb rishkrimin e skedar\u00ebve sistemik\u00eb.     <\/p>\n<p>P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb theksohet publikimi i versioneve t\u00eb reja t\u00eb projekteve Flatpak, Samba, FreeRDP, Clamav dhe Node.js, n\u00eb t\u00eb cilat jan\u00eb eliminuar vulnerabilitetet:    <\/p>\n<ul>\n<li class=\"l\"> \u0412 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u0430\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u0441\u0430\u043c\u043e\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Flatpak  1.10.6 \u0438  1.12.3 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43860) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u0430 \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u043a\u0440\u044b\u0442\u044c \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438. \u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (\u0431\u0435\u0437 CVE) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 &#171;flatpak-builder &#8212;mirror-screenshots-url&#187; \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0424\u0421 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430.\n<li class=\"l\">N\u00eb p\u00ebrdit\u00ebsimin e Samba 4.13.16 \u00ebsht\u00eb eliminuar nj\u00eb vulnerabilitet (CVE-2021-43566) q\u00eb lejon nj\u00eb klient t\u00eb arrij\u00eb krijimin e nj\u00eb katalogu jasht\u00eb zon\u00ebs s\u00eb eksportuar t\u00eb FS p\u00ebrmes manipulimeve me lidhje simbolike n\u00eb seksionet SMB1 ose NFS (problemi \u00ebsht\u00eb shkaktuar nga nj\u00eb gar\u00eb e gjendjes dhe \u00ebsht\u00eb e v\u00ebshtir\u00eb p\u00ebr t'u shfryt\u00ebzuar n\u00eb praktik\u00eb, por teori \u00ebsht\u00eb e mundur). Peshojn\u00eb versionet deri n\u00eb 4.13.16. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-newyork\/\"   title=\"serveri\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2695\">serveri<\/a> Po ashtu, \u00ebsht\u00eb publikuar nj\u00eb raport mbi nj\u00eb tjet\u00ebr vulnerabilitet t\u00eb ngjash\u00ebm (CVE-2021-20316) q\u00eb lejon nj\u00eb klient t\u00eb autentikuar t\u00eb lexoj\u00eb ose modifikoj\u00eb p\u00ebrmbajtjen e nj\u00eb skedari ose metadata e nj\u00eb katalogu n\u00eb zon\u00ebn e FS jasht\u00eb seksionit t\u00eb eksportuar. Problemi \u00ebsht\u00eb eliminuar n\u00eb versionin 4.15.0, por prek edhe deg\u00ebt e kaluara. N\u00eb k\u00ebt\u00eb rast, zgjidhjet p\u00ebr deg\u00ebt e vjetra nuk do t\u00eb publikohen pasi arkitektura e vjet\u00ebr e Samba VFS nuk lejon eliminimin e problemit p\u00ebr shkak t\u00eb lidhjes s\u00eb operacioneve me metadat t\u00eb lidhura me rrug\u00ebt e skedar\u00ebve (n\u00eb Samba 4.15, shtresa VFS \u00ebsht\u00eb rikonstruktuar plot\u00ebsisht). Rreziqi i problemit reduktohet nga fakti q\u00eb \u00ebsht\u00eb mjaft i komplikuar p\u00ebr t'u shfryt\u00ebzuar dhe t\u00eb drejtat e p\u00ebrdoruesit duhet t\u00eb lejojn\u00eb leximin ose shkrimin n\u00eb skedarin ose katalogun e synuar.\n<p>N\u00eb daljen e projektit FreeRDP 2.5, q\u00eb ofron nj\u00eb implementim t\u00eb lir\u00eb t\u00eb protokolit t\u00eb aksesit n\u00eb desktop RDP (Remote Desktop Protocol), jan\u00eb eliminuar tre probleme sigurie (identifikuesit CVE nuk jan\u00eb caktuar) q\u00eb mund t\u00eb \u00e7ojn\u00eb n\u00eb mbushjen e buffer-it gjat\u00eb p\u00ebrdorimit t\u00eb nj\u00eb locale t\u00eb pap\u00ebrshtatshme, p\u00ebrpunimi i parametrave t\u00eb regjistrit t\u00eb formatuar posa\u00e7\u00ebrisht dhe tregimi i emrit t\u00eb pap\u00ebrshtatsh\u00ebm t\u00eb shtes\u00ebs. Nd\u00ebr ndryshimet n\u00eb versionin e ri, v\u00ebrehet mb\u00ebshtetje p\u00ebr bibliotek\u00ebn OpenSSL 3.0, realizimi i konfigurimit TcpConnectTimeout, p\u00ebrmir\u00ebsimi i p\u00ebrputhshm\u00ebris\u00eb me LibreSSL dhe zgjidhja e problemeve me bufferin n\u00eb mjediset e bazuara n\u00eb Wayland. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-los-angeles\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3788\">server<\/a> N\u00eb versionet e reja t\u00eb paket\u00ebs antivirus t\u00eb lir\u00eb ClamAV 0.103.5 dhe 0.104.2 \u00ebsht\u00eb eliminuar vulnerabiliteti CVE-2022-20698, i lidhur me leximin e pap\u00ebrshtatsh\u00ebm t\u00eb pointerit dhe q\u00eb lejon nj\u00eb crash t\u00eb procesit n\u00eb distanc\u00eb, n\u00ebse paketa \u00ebsht\u00eb nd\u00ebrtuar me bibliotek\u00ebn libjson-c dhe n\u00eb cil\u00ebsimet \u00ebsht\u00eb aktivizuar opsioni CL_SCAN_GENERAL_COLLECT_METADATA (clamscan --gen-json).      <\/p>\n<li class=\"l\"> N\u00eb edicionin e projektit FreeRDP 2.5, q\u00eb ofron nj\u00eb zbatim t\u00eb lir\u00eb t\u00eb protokollit t\u00eb qasjes n\u00eb desktop RDP (Remote Desktop Protocol), jan\u00eb eliminuar tre probleme t\u00eb siguris\u00eb (identifikuesit CVE nuk jan\u00eb akorduar), t\u00eb cilat mund t\u00eb \u00e7ojn\u00eb n\u00eb mbushjen e memorjes gjat\u00eb p\u00ebrdorimit t\u00eb nj\u00eb lokalizimi t\u00eb pap\u00ebrshtatsh\u00ebm, p\u00ebrpunimit t\u00eb parametrave t\u00eb regjistrit t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb dhe specifikimit t\u00eb nj\u00eb emri t\u00eb pap\u00ebrshtatsh\u00ebm t\u00eb shtes\u00ebs. Ndryshimet n\u00eb versionin e ri p\u00ebrfshijn\u00eb mb\u00ebshtetje p\u00ebr bibliotek\u00ebn OpenSSL 3.0, implementimin e konfigurimit TcpConnectTimeout, p\u00ebrmir\u00ebsimin e kompatibilitetit me LibreSSL dhe zgjidhjen e problemeve me buferin e shk\u00ebmbimit n\u00eb mjedise t\u00eb bazuara n\u00eb Wayland.\n<li class=\"l\"> \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430  ClamAV 0.103.5 \u0438 0.104.2 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-20698, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0435\u0441\u043b\u0438 \u043f\u0430\u043a\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 libjson-c \u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f CL_SCAN_GENERAL_COLLECT_METADATA (clamscan &#8212;gen-json).\n<li class=\"l\"> N\u00eb p\u00ebrdit\u00ebsimet e platform\u00ebs Node.js 16.13.2, 14.18.3, 17.3.1 dhe 12.22.9 jan\u00eb eliminuar kat\u00ebr dob\u00ebsi: shmangia e kontrollit t\u00eb certifikat\u00ebs gjat\u00eb verifikimit t\u00eb lidhjes rrjetore p\u00ebr shkak t\u00eb transformimit t\u00eb pap\u00ebrshtatsh\u00ebm t\u00eb SAN (Emrat Alternativ\u00eb Subjekt) n\u00eb formatin e vargut (CVE-2021-44532); trajtimi i pap\u00ebrshtatsh\u00ebm i enumerimit t\u00eb shum\u00ebvler\u00ebsheve n\u00eb fushat subject dhe issuer, q\u00eb mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shmangur kontrollin e k\u00ebtyre fushave n\u00eb certifikata (CVE-2021-44533); shmangia e kufizimeve t\u00eb lidhura me llojin SAN t\u00eb URI-s\u00eb n\u00eb certifikata (CVE-2021-44531); kontrolli i pamjaftuesh\u00ebm i t\u00eb dh\u00ebnave t\u00eb hyrjes n\u00eb funksionin console.table(), i cili mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb caktuar vargje t\u00eb zbraz\u00ebta p\u00ebr \u00e7el\u00ebsa num\u00ebror\u00eb (CVE-2022-21824).          <\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56498\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102953","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-01-13T13:37:33+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-01-13T13:37:33+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsit\u00eb n\u00eb systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js | ProHoster","description":"N\u00eb utilitarin e p\u00ebrfshir\u00eb n\u00eb systemd, systemd-tmpfiles, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2021-3997), q\u00eb lejon thirrjen e rikursionit t\u00eb pakontrolluar. Problemi mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shkaktuar nj\u00eb ndalim n\u00eb sh\u00ebrbim gjat\u00eb ngarkimit t\u00eb sistemit duke krijuar nj\u00eb num\u00ebr t\u00eb madh n\u00ebnkatalog\u00ebsh n\u00eb katalogun \/tmp. Rregullimi \u00ebsht\u00eb aktualisht i disponuesh\u00ebm n\u00eb form\u00ebn e nj\u00eb patch-i. P\u00ebrdit\u00ebsimet e pakove q\u00eb zgjidhin problemin jan\u00eb ofruar n\u00eb Ubuntu dhe SUSE, por ende nuk jan\u00eb t\u00eb disponueshme n\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 systemd, Flatpak, Samba, FreeRDP, Clamav, Node.js | ProHoster","og:description":"\u0412\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 systemd \u0443\u0442\u0438\u043b\u0438\u0442\u0435 systemd-tmpfiles \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-3997), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \/tmp \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0444\u043e\u0440\u043c\u0435 \u043f\u0430\u0442\u0447\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u0432 Ubuntu \u0438 SUSE, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-systemd-flatpak-samba-freerdp-clamav-node-js","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-13T13:37:33+00:00","article:modified_time":"2022-01-13T13:37:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102953","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-13 13:38:58","updated":"2026-02-22 15:30:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=102953"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102953\/revisions"}],"predecessor-version":[{"id":162316,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102953\/revisions\/162316"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=102953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=102953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=102953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}