Category: Ikoranabuhanga

  • Habonetse icyuho gikomeye muri Linux (GhostLock): Abakoresha VPS bicungira seriveri zabo basabwe kwihutira gukora update

    Habonetse icyuho gikomeye muri Linux (GhostLock): Abakoresha VPS bicungira seriveri zabo basabwe kwihutira gukora update

    Abakoresha seriveri za Linux bicungira ubwabo (Self-Managed VPS) barasabwa kwihutira kuvugurura (update) kernel za Linux nyuma y’uko hagaragaye icyuho gikomeye cy’umutekano cyiswe GhostLock (CVE-2026-43499), gishobora gutuma umugizi wa nabi afata ububasha bwose bwa seriveri.

    Nk’uko GoDaddy yabitangaje, iki kibazo ntabwo kireba GoDaddy yonyine, ahubwo kireba hafi seriveri zose zikoresha Linux ku isi, kuko kiri muri Linux Kernel ikoreshwa n’ibice byinshi bya Linux nka Ubuntu, Debian, AlmaLinux, CentOS n’izindi.

    GhostLock ni iki?

    GhostLock ni icyuho cy’umutekano cyanditswe nka CVE-2026-43499, kikaba gifite uburemere buri hejuru (CVSS 7.8).

    Iyo umuntu mubi abonye uburyo bwo kwinjira kuri seriveri, nko kunyura muri porogaramu ifite intege nke cyangwa konti y’umukoresha, ashobora gukoresha iki cyuho akagira uburenganzira bwa root, ari bwo rwego rwo hejuru rw’ubuyobozi bwa Linux. Iyo abugezeho aba ashobora kugenzura seriveri yose.

    Ni bande bireba?

    GoDaddy ivuga ko:

    • Seriveri zose zikoresha Linux zigomba gufatwa nk’izishobora kugira iki kibazo kugeza igihe zibonye update ya kernel.
    • Seriveri zikoresha Windows ntabwo zirebwa n’iki cyuho.

    Icyo abakoresha bagomba gukora

    Abakoresha bicungira VPS zabo basabwe:

    • Kuvugurura (update) Linux kernel bakoresheje package zitangwa n’ikorwa rya Linux bakoresha.
    • Kongera gutangiza (reboot) seriveri nyuma ya update, kuko kernel nshya itangira gukora ari uko seriveri yongeye gufungurwa.
    • Kugenzura ko seriveri ikoresha kernel nshya bakoresheje itegeko:
    uname -r

    Hanyuma bakagereranya version iri gukora n’iyatangajwe nk’ikemura ikibazo n’ikorwa rya Linux bakoresha.

    Mu gihe update itaraboneka

    Mu gihe ibikorwa bya Linux bitaratanga kernel ikosoye, GoDaddy iragira inama abakoresha:

    • Gukomeza kuvugurura porogaramu zose n’ibikoresho (applications, CMS, plugins).
    • Kugabanya abantu bafite uburenganzira bwo kwinjira kuri seriveri, cyane cyane binyuze muri SSH.
    • Gukora backup cyangwa snapshot ya seriveri mbere yo gushyiraho update, kugira ngo biborohere kuyigarura mu gihe hagize ikibazo.

    Umwanzuro

    Nubwo GhostLock isaba ko uwagabye igitero aba yamaze kubona uburyo bwo kwinjira kuri seriveri mbere, impuguke zivuga ko ishobora gutuma uwo muntu ahita yigarurira seriveri yose mu gihe update itarakorwa.

    Ni yo mpamvu abakoresha Linux, cyane cyane abafite Self-Managed VPS, basabwa kwihutira gukora update za kernel no kongera gutangiza seriveri zabo kugira ngo zirindwe iki cyuho gikomeye cy’umutekano.