N\u00eb kodin e sistemit t\u00eb skedar\u00ebve XFS \u00ebsht\u00eb zbuluar nj\u00eb d\u00ebmtyeshm\u00ebri (CVE-2021-4155) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal, pa privilegje, t\u00eb lexoj\u00eb t\u00eb dh\u00ebnat e blloqeve t\u00eb pap\u00ebrdorura direkt nga pajisja bllokuese. T\u00eb gjitha versionet dometh\u00ebn\u00ebse t\u00eb b\u00ebrtham\u00ebs Linux m\u00eb t\u00eb vjetra se 5.16, q\u00eb p\u00ebrmbajn\u00eb drejtuesin XFS, jan\u00eb t\u00eb prekura nga kjo \u00e7\u00ebshtje. P\u00ebrshtatja \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb versionin 5.16, si dhe n\u00eb azhurnimet e b\u00ebrthamave 5.15.14, 5.10.91, 5.4.171, 4.19.225 etj. Mund t\u00eb ndiqni gjendjen e zhvillimit t\u00eb azhurnimeve q\u00eb adresojn\u00eb \u00e7\u00ebshtjen n\u00eb k\u00ebto faqe: Debian, RHEL, SUSE, Fedora, Ubuntu, Arch. <\/p>\n
D\u00ebmtueshm\u00ebria shkaktohet nga sjellja e gabuar e dy ioctl-specifik t\u00eb XFS (XFS_IOC_ALLOCSP) dhe ioctl(XFS_IOC_FREESP), t\u00eb cilat jan\u00eb ekuivalenti funksional i thirrjes sistemike fallocate(). Kur rritet madh\u00ebsia e skedarit, e cila nuk \u00ebsht\u00eb e rregulluar n\u00eb madh\u00ebsin\u00eb e bllokut, ioctl XFS_IOC_ALLOCSP\/XFS_IOC_FREESP nuk i zerojn\u00eb byte-t e fundit deri n\u00eb kufirin e ardhsh\u00ebm t\u00eb bllokut. Ashtu, n\u00eb XFS me madh\u00ebsi standarde blloku prej 4096 byte, sulmuesi mund t\u00eb lexoj\u00eb deri n\u00eb 4095 byte t\u00eb t\u00eb dh\u00ebnave t\u00eb shkruara m\u00eb par\u00eb nga \u00e7do bllok. N\u00eb k\u00ebto zona mund t\u00eb ket\u00eb t\u00eb dh\u00ebna t\u00eb skedar\u00ebve t\u00eb fshir\u00eb, skedar\u00ebve t\u00eb defragmentuar, si dhe skedar\u00ebve me blloqe t\u00eb deduplikura. <\/p>\n
Mund t\u00eb kontrolloni sistemin tuaj p\u00ebr k\u00ebt\u00eb \u00e7\u00ebshtje p\u00ebrmes nj\u00eb prototipi t\u00eb thjesht\u00eb t\u00eb nj\u00eb eksploiti. N\u00ebse pas ekzekutimit t\u00eb sekuenc\u00ebs s\u00eb sugjeruar t\u00eb komandave arrini t\u00eb lexoni tekstin e Shekspirit, at\u00ebher\u00eb drejtuesi i FS \u00ebsht\u00eb i preksh\u00ebm. Montimi fillestar i ndarjes XFS p\u00ebr demonstrim k\u00ebrkon t\u00eb drejtat e superp\u00ebrdoruesit. <\/p>\n
\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 ioctl(XFS_IOC_ALLOCSP) \u0438 ioctl(XFS_IOC_FREESP) \u043f\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0442\u0441\u044f \u043e\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e fallocate(), \u0438 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0438\u0445 \u043e\u0442\u043b\u0438\u0447\u0438\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0445 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0431\u0435\u043a\u0434\u043e\u0440. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0431\u0449\u0443\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 – \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0432 \u044f\u0434\u0440\u0435, – \u043f\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u041b\u0438\u043d\u0443\u0441\u0430, \u043f\u0440\u0438\u043d\u044f\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u044d\u0442\u0438 ioctl’\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0412 \u043a\u043e\u0434\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b XFS \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-4155), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0441 \u0431\u043b\u043e\u0447\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0412\u0441\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0434\u0440\u0430 Linux \u0441\u0442\u0430\u0440\u0448\u0435 5.16, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 XFS, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044e 5.16, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0435\u0440 5.15.14, 5.10.91, 5.4.171, 4.19.225 \u0438 \u0442.\u0434. \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102964","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47D\u00ebmtueshm\u00ebria n\u00eb XFS q\u00eb lejon leximin e t\u00eb dh\u00ebnave t\u00eb pap\u00ebrpunuara nga pajisja bllokuese | ProHoster","description":"N\u00eb kodin e sistemit t\u00eb skedar\u00ebve XFS \u00ebsht\u00eb zbuluar nj\u00eb d\u00ebmtyeshm\u00ebri (CVE-2021-4155) q\u00eb lejon nj\u00eb p\u00ebrdorues lokal, pa privilegje, t\u00eb lexoj\u00eb t\u00eb dh\u00ebnat e blloqeve t\u00eb pap\u00ebrdorura direkt nga pajisja bllokuese. T\u00eb gjitha versionet dometh\u00ebn\u00ebse t\u00eb b\u00ebrtham\u00ebs Linux m\u00eb t\u00eb vjetra se 5.16, q\u00eb p\u00ebrmbajn\u00eb drejtuesin XFS, jan\u00eb t\u00eb prekura nga kjo \u00e7\u00ebshtje. P\u00ebrshtatja \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb versionin 5.16, si dhe n\u00eb azhurnimet e b\u00ebrthamave 5.15.14, 5.10.91, 5.4.171, 4.19.225 etj. Gjendja e zhvillimit t\u00eb azhurnimeve q\u00eb adresojn\u00eb \u00e7\u00ebshtjen","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-xfs-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d1%87%d0%b8%d1%82%d0%b0%d1%82%d1%8c-%d1%81%d1%8b%d1%80","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 XFS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0447\u0438\u0442\u0430\u0442\u044c \u0441\u044b\u0440\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u043b\u043e\u0447\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b XFS \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-4155), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0431\u043b\u043e\u043a\u043e\u0432 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0441 \u0431\u043b\u043e\u0447\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0412\u0441\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u044f\u0434\u0440\u0430 Linux \u0441\u0442\u0430\u0440\u0448\u0435 5.16, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 XFS, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044e 5.16, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0435\u0440 5.15.14, 5.10.91, 5.4.171, 4.19.225 \u0438 \u0442.\u0434. \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/%d1%83%d1%8f%d0%b7%d0%b2%d0%b8%d0%bc%d0%be%d1%81%d1%82%d1%8c-%d0%b2-xfs-%d0%bf%d0%be%d0%b7%d0%b2%d0%be%d0%bb%d1%8f%d1%8e%d1%89%d0%b0%d1%8f-%d1%87%d0%b8%d1%82%d0%b0%d1%82%d1%8c-%d1%81%d1%8b%d1%80","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-14T19:37:17+00:00","article:modified_time":"2022-01-14T19:37:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102964","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-14 19:38:29","updated":"2022-09-27 14:45:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102964","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=102964"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/102964\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=102964"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=102964"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=102964"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"