{"id":121855,"date":"2025-02-12T02:22:04","date_gmt":"2025-02-12T00:22:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej"},"modified":"2025-02-12T02:22:04","modified_gmt":"2025-02-12T00:22:04","slug":"obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsimi OpenSSL 3.4.1 me zgjidhje p\u00ebr dob\u00ebsit\u00eb","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jan\u00eb n\u00eb dispozicion l\u00ebshime korrigjuese p\u00ebr bibliotek\u00ebn kriptografike OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 dhe 3.4.1. N\u00eb versionet 3.2.4, 3.3.3 dhe 3.4.1 \u00ebsht\u00eb rregulluar nj\u00eb cenueshm\u00ebri (CVE-2024-12797), e cila ka nj\u00eb klasifikim t\u00eb lart\u00eb rreziku. Kjo cenueshm\u00ebri lejon organizimin e nj\u00eb sulmi MITM n\u00eb lidhjet TLS dhe DTLS. Problemi shfaqet vet\u00ebm n\u00eb sistemet q\u00eb p\u00ebrdorin \u00e7el\u00ebsa t\u00eb hapur RPK (Raw Public Key, RFC 7250) p\u00ebr autentikimin e klient\u00ebve. Nga ana e klientit, mb\u00ebshtetja p\u00ebr RPK \u00ebsht\u00eb e \u00e7aktivizuar si parazgjedhje dhe serverit<\/a>. <\/p>\n

Cenueshm\u00ebria shkaktohet nga fakti se OpenSSL nuk i kthen informacion klientit rreth d\u00ebshtimit t\u00eb autentikimit t\u00eb serverit gjat\u00eb vendosjes s\u00eb nj\u00eb lidhjeje q\u00eb p\u00ebrdor m\u00ebnyr\u00ebn e verifikimit SSL_VERIFY_PEER, pasi procesi i negociat\u00ebs s\u00eb lidhjes nuk nd\u00ebrpritet n\u00eb m\u00ebnyr\u00eb t\u00eb duhur. nj\u00eb sulmues mund t\u00eb realizoj\u00eb nj\u00eb sulm MITM dhe t\u00eb redirektoj\u00eb trafikun n\u00eb hostin e tij n\u00eb vend t\u00eb serverit t\u00eb synuar, nd\u00ebrsa klienti nuk do t\u00eb marr\u00eb informacion q\u00eb server<\/a> nuk \u00ebsht\u00eb autentikuar. Problemi shfaqet duke filluar nga dega OpenSSL 3.2, ku u mund\u00ebsua p\u00ebrdorimi i RPK n\u00eb vend t\u00eb certifikatave X.509. <\/p>\n

P\u00ebr m\u00eb tep\u00ebr, n\u00eb p\u00ebrdit\u00ebsimet e OpenSSL \u00ebsht\u00eb rregulluar nj\u00eb cenueshm\u00ebri CVE-2024-13176, e cila lejon kryerjen e nj\u00eb sulmi p\u00ebrmes kanaleve an\u00ebsore p\u00ebr t\u00eb rikrijuar \u00e7el\u00ebsin e mbyllur ECDSA p\u00ebrmes analiz\u00ebs s\u00eb vonesave q\u00eb ndodhin gjat\u00eb gjenerimit t\u00eb n\u00ebnshkrimit digjital. Q\u00ebllimi i cenueshm\u00ebris\u00eb \u00ebsht\u00eb se p\u00ebr disa lloje t\u00eb kurbave eliptike, p\u00ebr shembull, NIST P-521, nga masa e p\u00ebrgjithshme mund t\u00eb ndahen llogaritjet me bita t\u00eb lart\u00eb zero t\u00eb vler\u00ebs s\u00eb inekicionit (nonce), koha e p\u00ebrpunimit t\u00eb t\u00eb cilave ndryshon 300 nanosekonda. <\/p>\n

N\u00eb rastin e ECDSA, p\u00ebrcaktimi edhe i disa biteve me informacion rreth vektorit t\u00eb inekicionit \u00ebsht\u00eb i mjaftuesh\u00ebm p\u00ebr t\u00eb kryer nj\u00eb sulm p\u00ebr rikuperimin sequential t\u00eb t\u00eb gjith\u00eb \u00e7el\u00ebsit t\u00eb mbyllur. P\u00ebr t\u00eb kryer me sukses sulmin, sulmuesi duhet t\u00eb ket\u00eb akses n\u00eb sistemin lokal, ku ekzekutohet aplikacioni q\u00eb formon n\u00ebnshkrimet digjitale, ose qasje t\u00eb shpejt\u00eb n\u00eb rrjet n\u00eb aplikacion me vonesa shum\u00eb t\u00eb ulta. Sulmuesi gjithashtu duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb t\u00eb analizoj\u00eb me nj\u00eb sakt\u00ebsi t\u00eb lart\u00eb koh\u00ebn e gjenerimit t\u00eb nj\u00eb numri t\u00eb madh n\u00ebnshkrimesh digjitale t\u00eb krijuara mbi t\u00eb dh\u00ebna q\u00eb ai i njeh.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 \u0438 3.4.1. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.2.4, 3.3.3 \u0438 3.4.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12797), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f TLS \u0438 DTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 RPK (Raw Public Key, RFC 7250). \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121855","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebrdit\u00ebsimi OpenSSL 3.4.1 me rregullimin e cenueshm\u00ebrive | ProHoster","description":"Jan\u00eb n\u00eb dispozicion l\u00ebshime korrigjuese p\u00ebr bibliotek\u00ebn kriptografike OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 dhe 3.4.1. N\u00eb versionet 3.2.4, 3.3.3 dhe 3.4.1 \u00ebsht\u00eb rregulluar nj\u00eb cenueshm\u00ebri (CVE-2024-12797), e cila ka nj\u00eb klasifikim t\u00eb lart\u00eb rreziku. Kjo cenueshm\u00ebri lejon organizimin e nj\u00eb sulmi MITM n\u00eb lidhjet TLS dhe DTLS. Problemi shfaqet vet\u00ebm n\u00eb sistemet q\u00eb p\u00ebrdorin \u00e7el\u00ebsa t\u00eb hapur RPK (Raw Public Key, RFC 7250). Nga ana e klientit, mb\u00ebshtetja","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 OpenSSL 3.4.1 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.16, 3.1.8, 3.2.4, 3.3.3 \u0438 3.4.1. \u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.2.4, 3.3.3 \u0438 3.4.1 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12797), \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f TLS \u0438 DTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 RPK (Raw Public Key, RFC 7250). \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-openssl-3-4-1-s-ustraneniem-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-02-12T00:22:04+00:00","article:modified_time":"2025-02-12T00:22:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121855","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:50:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 10:32:20","updated":"2026-02-22 15:50:24"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=121855"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121855\/revisions"}],"predecessor-version":[{"id":173018,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/121855\/revisions\/173018"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=121855"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=121855"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=121855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}