N\u00eb bibliotek\u00ebn zlib \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2018-25032), e cila shkakton mbushje buferri gjat\u00eb p\u00ebrpjekjes p\u00ebr t\u00eb kompresuar nj\u00eb sekuenc\u00eb t\u00eb gatshme simbolesh n\u00eb t\u00eb dh\u00ebnat hyr\u00ebse. N\u00eb gjendjen aktuale, studiuesit kan\u00eb demonstruar mund\u00ebsin\u00eb e shkaktimit t\u00eb nj\u00eb p\u00ebrfundimi t\u00eb papritur t\u00eb procesit. A ka ndonj\u00eb pasoj\u00eb m\u00eb serioze nga problemi nuk \u00ebsht\u00eb hetuar ende. <\/p>\n
Dob\u00ebsia shfaqet q\u00eb nga versioni zlib 1.2.2.2 dhe prek p\u00ebrfshir\u00eb versionin aktual zlib 1.2.11. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb se nj\u00eb patches p\u00ebr rregullimin e dob\u00ebsis\u00eb u propozua q\u00eb n\u00eb vitin 2018, por zhvilluesit nuk i kushtuan v\u00ebmendje dhe nuk l\u00ebshuan nj\u00eb version korrektues (biblioteka zlib u p\u00ebrdit\u00ebsua p\u00ebr her\u00eb t\u00eb fundit n\u00eb vitin 2017). Rregullimi n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb nuk \u00ebsht\u00eb p\u00ebrfshir\u00eb ende n\u00eb paketat e ofruara nga distribucioni. Kjo mund t\u00eb ndiqet n\u00eb k\u00ebto faqe: Debian, RHEL, Fedora, SUSE, Ubuntu, Arch Linux, OpenBSD, FreeBSD, NetBSD. Biblioteka zlib-ng nuk p\u00ebson nga problemi. <\/p>\n
Dob\u00ebsia shfaqet n\u00ebse n\u00eb rrjedh\u00ebn hyr\u00ebse haset nj\u00eb num\u00ebr i madh p\u00ebrputhjesh q\u00eb do t\u00eb paketohen, t\u00eb cilave u zbatohet paketimi bazuar n\u00eb kodet e fiksuara t\u00eb Huffman. N\u00ebn disa rrethana, p\u00ebrmbajtja e buffers p\u00ebrkoh\u00ebsor, n\u00eb t\u00eb cilin vendoset rezultati i kompresimit, mund t\u00eb mbivendoset n\u00eb memorien ku ruhet tabela e frekuencave t\u00eb simboleve. Si rezultat, ndodhin t\u00eb dh\u00ebna t\u00eb kompresuara t\u00eb papara dhe d\u00ebshtim p\u00ebr shkak t\u00eb shkrimit p\u00ebrtej buferrit. <\/p>\n
Dob\u00ebsia mund t\u00eb shfryt\u00ebzohet vet\u00ebm n\u00ebse p\u00ebrdoret strategjia e kompresimit e bazuar n\u00eb kodet fikse t\u00eb Huffman. Nj\u00eb strategji e till\u00eb zgjidhet kur n\u00eb kod aktivizohet opsioni Z_FIXED (shembulli i sekuenc\u00ebs q\u00eb shkakton d\u00ebshtimin kur p\u00ebrdoret opsioni Z_FIXED). Sipas kodit, strategjia Z_FIXED gjithashtu mund t\u00eb p\u00ebrzgjidhet automatikisht, n\u00ebse drur\u00ebt optimale dhe statike t\u00eb llogaritur p\u00ebr t\u00eb dh\u00ebnat kan\u00eb t\u00eb nj\u00ebjtin madh\u00ebsi. <\/p>\n
Ende nuk dihet n\u00ebse mund t\u00eb p\u00ebrshtaten kushte p\u00ebr shfryt\u00ebzimin e dob\u00ebsis\u00eb duke p\u00ebrdorur strategjin\u00eb e kompresimit Z_DEFAULT_STRATEGY, e cila aplikohet si parazgjedhje. N\u00ebse jo, at\u00ebher\u00eb dob\u00ebsia do t\u00eb kufizohet n\u00eb sisteme specifike n\u00eb t\u00eb cilat aplikohet qart\u00eb opsioni Z_FIXED. N\u00ebse po, d\u00ebmi nga dob\u00ebsia mund t\u00eb jet\u00eb shum\u00eb i konsideruesh\u00ebm, pasi biblioteka zlib \u00ebsht\u00eb standardi de facto dhe p\u00ebrdoret n\u00eb shum\u00eb projekte popullore, p\u00ebrfshir\u00eb kernelin Linux, OpenSSH, OpenSSL, apache httpd, libpng, FFmpeg, rsync, dpkg, rpm, Git, PostgreSQL, MySQL etj. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"