{"id":38530,"date":"2019-10-31T22:24:20","date_gmt":"2019-10-31T19:24:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/opublikovan-exim-4-92-3-s-ustraneniem-chetvyortoj-za-god-kriticheskoj-uyazvimosti\/"},"modified":"2019-10-31T22:24:20","modified_gmt":"2019-10-31T19:24:20","slug":"opublikovan-exim-4-92-3-s-ustraneniem-chetvyortoj-za-god-kriticheskoj-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/opublikovan-exim-4-92-3-s-ustraneniem-chetvyortoj-za-god-kriticheskoj-uyazvimosti","title":{"rendered":"Publikimi Exim 4.92.3 me riparimin e kat\u00ebrta p\u00ebr vitin e nj\u00eb vulnerabiliteti kritik.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publikuar<\/a><\/noindex> l\u00ebshim emergjent i serverit t\u00eb post\u00ebs Exim 4.92.3<\/a><\/noindex> me rregullimin e m\u00ebtejsh\u00ebm vulnerabilitetit kritik<\/a><\/noindex> (CVE-2019-16928<\/a><\/noindex>), e cila potencialisht lejon ekzekutimin e kodit tuaj n\u00eb server p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb stringu t\u00eb formatuar posa\u00e7\u00ebrisht n\u00eb komand\u00ebn EHLO. Vulnerabiliteti shfaqet pas rivendosjes s\u00eb privilegjeve dhe \u00ebsht\u00eb i kufizuar n\u00eb ekzekutimin e kodit me t\u00eb drejtat e p\u00ebrdoruesit t\u00eb pafavorsh\u00ebm, n\u00ebn t\u00eb cilin funksionon p\u00ebrpunuesi i mesazheve t\u00eb ardhura.<\/p>\n

Problemi shfaqet vet\u00ebm n\u00eb deg\u00ebn Exim 4.92 (4.92.0, 4.92.1 dhe 4.92.2) dhe nuk p\u00ebrputhet me rregullimin e vulnerabilitetit t\u00eb mes\u00ebm t\u00eb muajit, CVE-2019-15846<\/a><\/noindex>. Vulnerabiliteti shkaktohet nga mbingarkesa e buferit n\u00eb funksionin string_vformat()<\/a><\/noindex>, e cila \u00ebsht\u00eb e p\u00ebrcaktuar n\u00eb skedarin string.c. Eksploitimi i demonstruar lejon q\u00eb t\u00eb shkaktohet nj\u00eb crash p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb stringu t\u00eb gjat\u00eb (disa kilobajt) n\u00eb komand\u00ebn EHLO, por vulnerabiliteti mund t\u00eb shfryt\u00ebzohet edhe p\u00ebrmes komandave t\u00eb tjera, dhe potencialisht mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb organizuar ekzekutimin e kodit.<\/a><\/noindex> Mungojn\u00eb rrug\u00ebt alternative p\u00ebr t\u00eb bllokuar vulnerabilitetin, prandaj t\u00eb gjith\u00eb p\u00ebrdoruesve u rekomandohet urgjentisht q\u00eb t\u00eb instalohet p\u00ebrdit\u00ebsimi, t\u00eb aplikojn\u00eb<\/p>\n

Nuk jan\u00eb t\u00eb pranishme rrug\u00eb alternative p\u00ebr bllokimin e k\u00ebt\u00eb dob\u00ebsie, prandaj \u00ebsht\u00eb e rekomanduar q\u00eb t\u00eb gjith\u00eb p\u00ebrdoruesit t\u00eb instalojn\u00eb menj\u00ebher\u00eb p\u00ebrdit\u00ebsimin e propozuar. patch<\/a><\/noindex> ose t\u00eb siguroheni p\u00ebr p\u00ebrdorimin e paketave t\u00eb ofruara nga distribucionet, n\u00eb t\u00eb cilat jan\u00eb transferuar rregullimet p\u00ebr dob\u00ebsit\u00eb e tanishme. Rregullimi \u00ebsht\u00eb l\u00ebshuar p\u00ebr Ubuntu<\/a><\/noindex> (prekin vet\u00ebm deg\u00ebn 19.04), Arch Linux<\/a><\/noindex>, FreeBSD<\/a><\/noindex>, Debian<\/a><\/noindex> (prekin vet\u00ebm Debian 10 Buster) dhe Fedora<\/a><\/noindex>. RHEL dhe CentOS nuk preken nga problemi, pasi Exim nuk \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb repository t\u00eb tyre t\u00eb paketave (n\u00eb EPEL7<\/a><\/noindex> p\u00ebrdit\u00ebsimi \u00ebsht\u00eb ende mungon<\/a><\/noindex>). N\u00eb SUSE\/openSUSE, dob\u00ebsia nuk shfaqet p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb deg\u00ebs Exim 4.88.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Exim 4.92.3 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-16928), \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 EHLO. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0435\u0442\u043a\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38530","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 \u00cbsht\u00eb publikuar Exim 4.92.3 me zgjidhjen e kat\u00ebrt p\u00ebr k\u00ebt\u00eb vit t\u00eb dob\u00ebsis\u00eb kritike | ProHoster","description":"Numri i nj\u00eb edicioni t\u00eb jasht\u00ebzakonsh\u00ebm t\u00eb serverit t\u00eb post\u00ebs \u00ebsht\u00eb publikuar","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/opublikovan-exim-4-92-3-s-ustraneniem-chetvyortoj-za-god-kriticheskoj-uyazvimosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d Exim 4.92.3 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0447\u0435\u0442\u0432\u0451\u0440\u0442\u043e\u0439 \u0437\u0430 \u0433\u043e\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/opublikovan-exim-4-92-3-s-ustraneniem-chetvyortoj-za-god-kriticheskoj-uyazvimosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:20+00:00","article:modified_time":"2019-10-31T19:24:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38530","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:24:45","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:07:40","updated":"2026-01-23 22:24:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=38530"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38530\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=38530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=38530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=38530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}