ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹Exim 4.98 ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจ

ื ืึธืš ืึทื›ื˜ ื—ื“ืฉื™ื ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’, ื“ื™ Exim 4.98 ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจ ืžืขืœื“ื•ื ื’ ืื™ื– ืืจื•ื™ืก, ืžื™ื˜ ืึทืงื™ื•ืžื™ืึทืœื™ื™ื˜ื™ื“ ืคื™ืงืกื™ื– ืื•ืŸ ื ื™ื™ึทืข ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืฆื•ื’ืขื’ืขื‘ืŸ. ื“ื™ ืคึผืจื•ื™ืขืงื˜ ืงืึธื“ ืื™ื– ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ C ืื•ืŸ ืื™ื– ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ืื•ื ื˜ืขืจ ื“ื™ GPLv2+ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ. ืœื•ื™ื˜ ืึท ื™ื•ื ื™ ืึธื˜ืึทืžื™ื™ื˜ื™ื“ ื™ื‘ืขืจื‘ืœื™ืง ืคื•ืŸ ื•ื•ืขื’ืŸ 400 ื˜ื•ื™ื–ื ื˜ ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจืก, ื“ื™ ื˜ื™ื™ืœืŸ ืคื•ืŸ ืขืงืกื™ื ืื™ื– 59.06% (ืึท ื™ืึธืจ ืฆื•ืจื™ืง 55.93%), ืคึผืึธืกื˜ืคื™ืงืก ืื™ื– ื’ืขื ื™ืฆื˜ ืื•ื™ืฃ 34.68% (37.40%) ืคื•ืŸ ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจืก, Sendmail - 3.42% (3.45%) %), ืžืึทื™ืœืขื ืึทื‘ืœืข - 1.81% (1.86%), ืžื“ืึทืขืžืึธืŸ - 0.37% (0.48%), ืžื™ื™ืงืจืึธืกืึธืคึฟื˜ ืขืงืกื˜ืฉืึทื ื’ืข - 0.17% (0.25%).

ื”ื•ื™ืคึผื˜ ืขื ื“ืขืจื•ื ื’ืขืŸ:

  • ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2024-39929) ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืคืึทืœืฉ ืคึผืึทืจืกื™ื ื’ ืคื•ืŸ ื˜ืขืงืข ื ืขืžืขืŸ ืื™ืŸ E- ื‘ืจื™ื•ื• ืึทื˜ืึทื˜ืฉืžืึทื ืฅ ืื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ื™ื™ืคึผืึทืก ืคื™ืœื˜ืขืจืก ื•ื•ืึธืก ื ื•ืฆืŸ ื“ื™ $ mime_filename ื‘ื™ื™ึทื˜ืขื•ื•ื“ื™ืง ืื•ืŸ ืœืึธื–ืŸ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืขืก ืฆื• ื–ื™ื™ืŸ ื˜ืจืึทื ืกืคืขืจื“ ื•ื•ื™ ืึทื˜ืึทื˜ืฉืžืึทื ืฅ, ื˜ืจืึธืฅ ื–ื™ื™ ื‘ืœืึทืงื˜ ืื™ืŸ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก.
  • ืื™ืŸ ืึทืงืœ ืก ื’ืขื•ื•ืขื ื“ื˜ ืฆื• ื“ืึทื˜ืŸ ื•ื•ืขืจื™ืึทื‘ืึทืœ ื“ื•ืจืš ื“ื™ DATA ื‘ืึทืคึฟืขืœ, ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื“ื™ dkim_status ืฆื•ืฉื˜ืึทื ื“ ืื™ื– ืขืจืœื•ื™ื‘ื˜, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืึธืคึผืฉืึทืฆืŸ ื“ื™ ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ื“ื™ ื˜ืฉืขืง ื“ื•ืจืš ื“ื™ DKIM (DomainKeys Identified Mail) ืžืขืงืึทื ื™ื–ืึทื.
  • ื•ื•ืขืŸ ืื™ืจ ื’ืขื‘ืŸ ื“ื™ dkim_verbose ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ, ื•ื•ืึธืก ืึทื•ื˜ืคึผื•ืฅ ื ืึธืš ื“ื™ื‘ืึทื’ื™ื ื’ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹DKIM ืฆื• ื“ื™ ืงืœืึธืฅ, ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ื’ื™ื˜ืึทืœ ืกื™ื’ื ืึทื˜ืฉืขืจื– ืื™ื– ื’ืขื•ื•ื™ื–ืŸ.
  • ื“ื™ dkim_timestamps ืึธืคึผืฆื™ืข, ื•ื•ืึธืก ืงืึธื ื˜ืจืึธืœืก ื“ื™ ื™ื ืงืœื•ื–ืฉืึทืŸ ืคื•ืŸ ืฆื™ื™ื˜ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืื™ืŸ ื“ื™ ื›ืกื™ืžืข, ืึทืœืึทื•ื– ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ ื•ื•ืขืจื˜ "0" ืฆื• ืœื™ื™ื’ืŸ ื“ื™ ืงืจืึทื ื˜ ืฆื™ื™ื˜.
  • ื“ื™ ืจืขืกื™ืคึผื™ืขื ืฅ_ืžืึทืงืก ืึธืคึผืฆื™ืข, ื•ื•ืึธืก ืฉื˜ืขืœื˜ ืึท ืฉื™ืขื•ืจ ืื•ื™ืฃ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืจื™ืกื™ืคึผื™ืึทื ืฅ ืคึฟืึทืจ ืื™ื™ืŸ ืึธื ื–ืึธื’, ืึทืœืึทื•ื– ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื•ื•ื™ืœื“ืงืึทืจื“ืก ืื•ืŸ ื•ื•ื™ืœื“ืงืึทืจื“ืก.
  • ื•ื•ืขืŸ ืื™ืจ ืคึผืจื•ื‘ื™ืจืŸ ืื•ื™ืกื“ืจื•ืงืŸ ืžื™ื˜ ื“ื™ ื‘ืึทืคึฟืขืœ "exim -be", ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืฉื˜ืขืœืŸ ื˜ื™ื™ื ื˜ื™ื“ ื•ื•ืึทืœื•ืขืก (ื•ื•ืึทืœื•ืขืก ื‘ืืงื•ืžืขืŸ ื•ื™ืกื•ื•ื™ื™ื ื™ืง, ืœืžืฉืœ, ื‘ืึทืฉื˜ื™ืžื˜ ื“ื•ืจืš ื“ื™ ืกืขื ื“ืขืจ ืคื•ืŸ ืึท ื‘ืจื™ื•ื•).
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคึผืจืึทืกืขืกื™ื ื’ ืื•ืŸ ื•ื•ื™ื™ึทื– ืื™ืŸ ื“ื™ ืœืึธื’ืก ื“ื™ "dns: fail" ื’ืขืฉืขืขื ื™ืฉ ื•ื•ืึธืก ืึทืงืขืจื– ื•ื•ืขืŸ ืึท ื‘ืงืฉื” ืฆื• DNSBL ืจืฉื™ืžื•ืช ืคื™ื™ืœื–.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื–ื•ื›ืŸ ื“ื•ืจืš ื“ืขืจืขื ื“ื™ืงื˜ ื˜ืขืงืข ื“ืจืš ("${ืœื•ืงืึทืคึผ {foo/bar} dsearch, key=path {/etc}}") ืฆื• ื“ืกืขืึทืจื˜ืฉ ืœื•ืงืึทืคึผ ื‘ืœืึทืงืก.
  • ื“ื™ ืžื™ื™ืœื˜ืขืกื˜ ื ื•ืฆืŸ ืื™ื– ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืฆื• ืคึผืจื•ื‘ื™ืจืŸ ืื•ืŸ ื“ื™ืึทื’ื ืึธื–ื™ืจืŸ ื“ื™ SMTP ืงืฉืจ.
  • ืฉื˜ื™ืฆืข ืคืืจ ื“ื™ WELLKNOWN SMTP ืขืงืกื˜ืขื ืฉืึทืŸ ืื™ื– ืื™ืžืคืœืขืžืขื ื˜ื™ืจื˜ ื’ืขื•ื•ืืจืŸ, ื•ื•ืืก ืขืจืœื•ื™ื‘ื˜ ื“ืขื SMTP ืกืขืจื•ื•ืขืจ ืฆื• ืื™ื‘ืขืจื’ืขื‘ืŸ ืขืคื ื˜ืœืขื›ืข ืื™ื ืคืืจืžืืฆื™ืข ืฆื•ื ืงืœื™ืขื ื˜, ื•ื•ื™ ืงืื ื˜ืืงื˜ ืื™ื ืคืืจืžืืฆื™ืข ืื“ืขืจ ื•ื•ืขืจื™ืคื™ืงืืฆื™ืข ืคืืจืืžืขื˜ืขืจืก, ื ืื›ืŸ ื‘ืืงื•ืžืขืŸ. TLS ืกืขืจื˜ื™ืคื™ืงืึทื˜, ื ื™ืฆื ื“ื™ืง ื“ืขื ACME ืคึผืจืึธื˜ืึธืงืึธืœ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ SQLite3 ืฆื• ืงืจืึธื ื™ื ืขืจืœืขืš ื“ืึทื˜ืึทื‘ื™ื™ืกื™ื–, ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• DBD, NDB, GBDM ืื•ืŸ TDB. ืฆื• ื ื•ืฆืŸ SQLite3, ืื™ืจ ืžื•ื–ืŸ ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ "USE_SQLITE = y" ืื•ืŸ "DBMLIB = -lsqlite3" ืื™ืŸ ื“ื™ ืœืืงืืœืข/ืžืึทืงืขืคื™ืœืข ืื™ื™ื“ืขืจ ื‘ื ื™ืŸ.

ืžืงื•ืจ: opennet.ru

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster