{"id":41185,"date":"2020-02-06T14:41:55","date_gmt":"2020-02-06T11:41:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/openwrt-19-07-1"},"modified":"2020-02-06T14:41:55","modified_gmt":"2020-02-06T11:41:55","slug":"openwrt-19-07-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/openwrt-19-07-1","title":{"rendered":"OpenWrt 19.07.1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"


\n \"OpenWrt<\/p>\n

<\/a><\/p>\n

<\/p>\n

Jan\u00eb publik p\u00ebrdit\u00ebsime t\u00eb distribucionit OpenWrt 18.06.7<\/a> dhe 19.07.1<\/a>, n\u00eb t\u00eb cilat \u00ebsht\u00eb korrigjuar vulnerabiliteti<\/a> CVE-2020-7982 n\u00eb menaxherin e paketave opkg, i cili mund t\u00eb lejoj\u00eb nj\u00eb sulm MITM dhe t\u00eb z\u00ebvend\u00ebsoj\u00eb p\u00ebrmbajtjen e paket\u00ebs q\u00eb shkarkohet nga burimi. P\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb kodin e verifikimit t\u00eb kontrolleve t\u00eb shumave, sulmuesi mund t\u00eb injoroj\u00eb kontrollet SHA-256 t\u00eb paket\u00ebs, duke lejuar q\u00eb t\u00eb kalojn\u00eb mekanizmat e verifikimit t\u00eb integritetit t\u00eb burimeve ipk q\u00eb shkarkohen.<\/p>\n

<\/noindex><\/p>\n

Problemi ekziston q\u00eb nga shkurti 2017, pas shtimit t\u00eb kodit p\u00ebr t\u00eb injoruar hap\u00ebsirat e para q\u00eb vijn\u00eb para shum\u00ebs s\u00eb kontrollit. P\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb kalimin e hap\u00ebsirave, treguesi nuk l\u00ebvizte n\u00eb pozitat n\u00eb varg dhe cikli i dekodimit t\u00eb sekuenc\u00ebs gjexht\u00ebdhjet\u00eb e gjasht\u00eb t\u00eb SHA-256 e ktheu menj\u00ebher\u00eb kontrollin dhe jepte shum\u00ebn e kontrollit me gjat\u00ebsi zero.<\/p>\n

P\u00ebr shkak se menaxheri i paketave opkg ishte nisur nga root, nj\u00eb sulmues mund t\u00eb kishte ndryshuar p\u00ebrmbajtjen e paket\u00ebs ipk gjat\u00eb nj\u00eb sulmi MITM, duke e shkarkuar nga repozitori gjat\u00eb ekzekutimit t\u00eb komand\u00ebs \"opkg install\" nga p\u00ebrdoruesi, dhe t\u00eb organizonte ekzekutimin e kodit t\u00eb tij me t\u00eb drejta root p\u00ebrmes shtimit n\u00eb paket\u00eb t\u00eb skripteve t\u00eb tij t\u00eb p\u00ebrpunimit, t\u00eb thirrura gjat\u00eb instalimit. P\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsin\u00eb, sulmuesi gjithashtu duhet t\u00eb kishte z\u00ebvend\u00ebsuar indeksin e paketave (p\u00ebr shembull, duke ia dh\u00ebn\u00eb at\u00eb nga downloads.openwrt.org). Masa e paket\u00ebs s\u00eb modifikuar duhet t\u00eb p\u00ebrputhet me origjinalen, sipas indeksit.<\/p>\n

N\u00eb versionet e reja \u00ebsht\u00eb eliminuar gjithashtu nj\u00eb vulnerabiliteti<\/a> n\u00eb bibliotek\u00ebn libubox, e cila mund t\u00eb \u00e7oj\u00eb n\u00eb mbushje t\u00eb tamponave gjat\u00eb p\u00ebrpunimit n\u00eb funksionin blobmsg_format_json t\u00eb t\u00eb dh\u00ebnave t\u00eb serializuara me format t\u00eb ve\u00e7ant\u00eb ose t\u00eb dh\u00ebnave n\u00eb formatin JSON. <\/p>\n

<\/noindex><\/noindex><\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 OpenWrt 18.06.7 \u0438 19.07.1, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-7982 \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 opkg, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u043e\u0433\u043e \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430. \u0418\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u0440\u043e\u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0443\u043c\u043c\u044b SHA-256 \u0438\u0437 \u043f\u0430\u043a\u0435\u0442\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 ipk-\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":41186,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-41185","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenWrt 19.07.1 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/openwrt-19-07-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47OpenWrt 19.07.1 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/openwrt-19-07-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T11:41:55+00:00","article:modified_time":"2020-02-06T11:41:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"41185","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:23:10","updated":"2022-09-27 20:14:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/41185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=41185"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/41185\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/41186"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=41185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=41185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=41185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}