{"id":121855,"date":"2025-02-12T02:22:04","date_gmt":"2025-02-12T00:22:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej"},"modified":"2025-02-12T02:22:04","modified_gmt":"2025-02-12T00:22:04","slug":"obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsimi OpenSSL 3.4.1 p\u00ebr eliminimin e dob\u00ebsive","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jan\u00eb disponuesh\u00ebm versione korrigjuese t\u00eb bibliotek\u00ebs kriptografike OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 dhe 3.4.1. N\u00eb versionet 3.2.4, 3.3.3 dhe 3.4.1 \u00ebsht\u00eb eliminuar nj\u00eb dob\u00ebsi (CVE-2024-12797) me nivel t\u00eb lart\u00eb rreziku. Dob\u00ebsia lejon organizimin e nj\u00eb sulmi MITM n\u00eb lidhjet TLS dhe DTLS. Problemi ndodh vet\u00ebm n\u00eb sistemet q\u00eb p\u00ebrdorin \u00e7el\u00ebsa publik\u00eb RPK (Raw Public Key, RFC 7250) p\u00ebr autentifikimin e klient\u00ebve. Vler\u00ebsimi i RPK \u00ebsht\u00eb i \u00e7aktivizuar p\u00ebr klient\u00ebt si parazgjedhje dhe serverit<\/a>. <\/p>\n

Dob\u00ebsia shkaktohet nga fakti se OpenSSL nuk i kthen informacionin klientit p\u00ebr d\u00ebshtimin e autentifikimit t\u00eb serverit gjat\u00eb krijimit t\u00eb lidhjes duke p\u00ebrdorur modin e verifikimit SSL_VERIFY_PEER, pasi procesi i negociat\u00ebs s\u00eb lidhjes nuk prishhet si\u00e7 duhet. Nj\u00eb sulmues mund t\u00eb organizoj\u00eb nj\u00eb sulm MITM dhe t\u00eb redirektoj\u00eb trafik\u00ebn n\u00eb hostin e tij n\u00eb vend t\u00eb serverit t\u00eb synuar, nd\u00ebrsa klienti nuk do t\u00eb marr\u00eb informacion se server<\/a> nuk \u00ebsht\u00eb autentifikuar. Problemi ndodh q\u00eb nga dega OpenSSL 3.2, n\u00eb t\u00eb cilin u mund\u00ebsua p\u00ebrdorimi i RPK n\u00eb vend t\u00eb certifikatave X.509. <\/p>\n

P\u00ebr m\u00eb tep\u00ebr, n\u00eb p\u00ebrdit\u00ebsimet e OpenSSL \u00ebsht\u00eb rregulluar dob\u00ebsia CVE-2024-13176, e cila lejon kryerjen e nj\u00eb sulmi p\u00ebrmes kanaleve an\u00ebsore p\u00ebr t\u00eb rikrijuar \u00e7el\u00ebsin e mbyllur ECDSA p\u00ebrmes analiz\u00ebs s\u00eb vonesave q\u00eb ndodhin gjat\u00eb gjenerimit t\u00eb n\u00ebnshkrimit digjital. Thelbi i dob\u00ebsis\u00eb \u00ebsht\u00eb se p\u00ebr disa lloje t\u00eb kurbave eliptike, si NIST P-521, mund t\u00eb ndahen llogaritjet me bit\u00eb e lart\u00eb t\u00eb zeros t\u00eb vler\u00ebs s\u00eb infrastruktur\u00ebs (nonce), koha e p\u00ebrpunimit t\u00eb t\u00eb cilave ndryshon p\u00ebr 300 nanosekonda. <\/p>\n

N\u00eb rastin e ECDSA, p\u00ebrcaktimi edhe i disa bit\u00ebve me informacion rreth infrastruktur\u00ebs \u00ebsht\u00eb i mjaftuesh\u00ebm p\u00ebr t\u00eb kryer nj\u00eb sulm p\u00ebr rikuperimin e gjith\u00eb \u00e7el\u00ebsit t\u00eb mbyllur p\u00ebrmes nj\u00eb procesi t\u00eb radh\u00ebs. P\u00ebr t\u00eb realizuar me sukses sulmin, sulmuesi duhet t\u00eb ket\u00eb akses n\u00eb sistemin lokal ku ekzekutohet aplikacioni q\u00eb krijon n\u00ebnshkrime digjitale, ose akses t\u00eb shpejt\u00eb rrjetor n\u00eb aplikacion me vonesa shum\u00eb t\u00eb ul\u00ebta. Sulmuesi gjithashtu duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t\u00eb analizoj\u00eb me sakt\u00ebsi koh\u00ebn e gjenerimit t\u00eb nj\u00eb numri t\u00eb madh n\u00ebnshkrimesh digjitale q\u00eb jan\u00eb krijuar mbi t\u00eb dh\u00ebnat q\u00eb ai i di.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 \u0438 3.4.1. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.2.4, 3.3.3 \u0438 3.4.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12797), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f TLS \u0438 DTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 RPK (Raw Public Key, RFC 7250). \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121855","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebrdit\u00ebsimi OpenSSL 3.4.1 me rregullimin e dob\u00ebsive | ProHoster","description":"Disponohen versionet e korrigjuara t\u00eb bibliotek\u00ebs kriptografike OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 dhe 3.4.1.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 OpenSSL 3.4.1 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 \u0438 3.4.1.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-02-12T00:22:04+00:00","article:modified_time":"2025-02-12T00:22:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121855","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:50:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 10:32:20","updated":"2026-02-22 15:50:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=121855"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121855\/revisions"}],"predecessor-version":[{"id":173018,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121855\/revisions\/173018"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=121855"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=121855"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=121855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}