Mhla tinga-25 Agasti 2026, i-Ejensi Yekuvikeleka kwe-Inthanethi Nekuvikeleka Kwengcalasizinda yaseMelika (CISA) yangeta i-CVE-2026-60004 ohlwini lwayo lwebutsakatsaka lobatiwako kutsi sebuyasetjentiswa (Known Exploited Vulnerabilities), yabeka lilanga lama-28 Agasti njengesikhatsi sekugcina sekulungisa kuma-ejensi emphakatsi ahulumende wemanyuwe. Lobutsakatsaka busecaleni le-Gitea, i-server lesemtfombo lovulekile yekusingatsa tindawo tekugcina ikhodi, leyo emacembu lamanyenti ayigijimisa engcalasizindeni yawo esikhundleni sekusebentisa sevisi ye-cloud.

Inombolo yekuhlonza ngekwayo ayisho lutfo kumnikati webhizinisi. Incazelo ikulenye indzawo. Lobu akusibo butsakatsaka kuwebhusayithi lebonwa ngemakhasimende akho nobe ku-app yakho yeselula. Butsakatsaka kulithulusi langekhatsi lekungekho muntfu ngaphandle kwelicembu letebuchwepheshe loke alivule. Futsi kungena kulo kuvula iminyango lengeke ivulwe kungena kuwebhusayithi yakho.

Kwentekeni ngempela

Ngekusho kwesecwayiso sekuvikeleka lesashicilelwa ngulabanakekela i-Gitea, lobutsakatsaka buvumela umsebentisi lonemvume levamile yekubhala kunoma nguyiphi indzawo yekugcina ikhodi kutsi atfumele i-patch leyentiwe ngebucili ku-endpoint ye-diffpatch. Loko kutfutfela i-Git hook lengagijima ku-server bese kugijimisa imiyalo ye-shell njenge-akhawunti lesevisi isebenta ngaphansi kwayo. Tinguculo kusukela ku-1.17 kuya ku-1.27.0 tiyatsintseka, futsi kulungiswa kwefika ku-1.27.1.

Lokubaluleke kakhulu kutsi lizinga lekungena liphansi kangakanani. Imvume yekubhala endzaweni yekugcina ikhodi akusilo lilungelo lelingavamile, futsi ekuhleleni lokumisiwe, lapho kutibhalisa kwakho kuvulekile, nobe ngubani angakha i-akhawunti futsi afinyelele kulelo zinga ngekwakhe. Kungako i-National Vulnerability Database yaseMelika (NVD) ibunika emaphuzu langu-9.8 kulayi-10 esikalini se-CVSS, emaphuzu lagcinelwe butsakatsaka lobungasetjentiswa kusuka kudze, lobungadzingi kucinisekisa lokuyinkimbinkimbi, futsi lobonakalisa ngalokuphelele imfihlo, kuphelela kanye nekutfolakala.

Secwayiso lesifanako siphawula kutsi kusetjentiswa lokuphumelelako kuveta lokunyenti kakhulu kunekhodi: imininingwane yekungena, timfihlo, ematafula elwati, tindawo tekugcina ikhodi letifakiwe, ema-token e-OAuth kanye nemasevisi angekhatsi i-server lengawafinyelela. Sihlaseli asihambi nemafayela embhalo kuphela. Sitfola sikhundla se-server ngekhatsi kwenethiwekhi yakho.

Kungani i-server yekhodi iyingoti kakhulu kunewebhusayithi yakho

Iwebhusayithi yakho igcina loko lofuna bantfu bakubone. I-server yakho yekhodi igcina loko lokusebentisa konkhe lokunye. Ngekwenta, lamasistimu angekhatsi avame kubutsa ndzawonye:

  • Ikhodi lengumtfombo yemasistimu akho, kufaka ekhatsi umcondvo wemanani, imitsetfo yekwehlisa emanani kanye nekuhlola timvume.
  • Emafayela ekuhlela nemavariyebuli endzawo lacuketse emaphasiwedi ematafula elwati, tikhiye temasango ekukhokha kanye nemininingwane yekungena ye-API yahulumende.
  • Tikhiye tekusabalalisa letingatfumela kuvuselela kucondze kuma-server ekukhicita.
  • Kufinyelela kwenethiwekhi yangekhatsi kuyiswa kuleminye imishini lengavulekelanga i-inthanethi nhlobo.

Lokuhlanganiswa kusho kutsi i-server yekhodi lengenelelwe akusiso sehlakalo lesitimele sodvwa, kodvwa yindzawo yekwetfula. Sihlaseli lesiphete tikhiye takho tekusabalalisa asidzingi kungena kusistimu yakho yekubalwa kwetimali. Sidzinga nje kuyitfumelela kuvuselela lesitisayinele sona.

Sikhala sangempela: emasistimu langenamnikati

Etinkampanini letinyenti letisezingeni lelimaphakatsi, luhlu lwemasistimu latfola kubuyeketwa kwekuvikeleka lulolo menenja alatiko: iwebhusayithi, i-app, i-ERP, i-imeyili. I-server yetindawo tekugcina ikhodi, sigijimisi sekuhlanganisa lokuchubekako, libhodi lekubuka langekhatsi kanye ne-server yemafayela yesikhashana lomunye umuntfu wayimisa eminyakeni lemibili leyengcile kwekuhlola lokusheshako, emasistimu langenamnikati lowatiwako. Kute lonemtfwalo wekuwavuselela, kute lowatiko kutsi ngubani lonekufinyelela kuwo, futsi akavezeki kunoma nguluphi luhlu.

Kulapho kanye lapho bahlaseli basebenta khona. Lithulusi lelingenamnikati lithulusi lekute loliwuselelako, futsi lithulusi lekute loliwuselelako lihlala lisengotini tinyanga ngemuva kwekutsi kulungiswa kukhishiwe. Buka lomugca wesikhatsi lapha: kulungiswa kwakhishwa ku-1.27.1, futsi kufakwa ohlwini njengobutsakatsaka lobusetjentiswa ngenkhutsalo kwefika emavikini lambalwa kamuva. Sikhala emkhatsini wekutsi kulungiswa kutfolakale nekutsi kufakwe yindzawo lapho kungenelela kuhlala khona.

Lokufanele ukwente kulelivikini

Kuvala lomnyango akudzingi luhlelo lolukhulu lwekuvikeleka. Kudzinga tinyatselo letine licembu lakho letebuchwepheshe nobe umhlinzeki wakho langaticedza ngemalanga lambalwa:

  • Cela luhlu lolubhaliwe lwato tonkhe tistimu tangekhatsi letisebenta kuma-server akho, ngamunye unemnikati lobitwa ngelibito, umuntfu hhayi litiko.
  • Cela inombolo yeluhlobo yalo lonkhe lithulusi lesemtfombo lovulekile lolisebentisako kanye nekutsi lagcina nini kuvuselelwa. Nawusebentisa i-Gitea, kucinisekisa kutsi use-1.27.1 nobe lokulandzelako ngumbuto wemaminitsi lamabili.
  • Vala kutibhalisa kwakho kuwo onkhe emathulusi angekhatsi. Kute sizatfu sekusebenta sekutsi likhasi lekubhalisa ku-server yekhodi livulekele i-inthanethi.
  • Buta umbuto munye longakhululeki: nangabe timfihlo talesi-server tebiwe lamuhla, bekungatsatsa emalanga lamangakhi kutishintja tonkhe? Nangabe kute imphendvulo, imphendvulo kutsi angeke ukhone.

Engeta kuloko lohlangotsi lwemtsetfo. Emasistimu angekhatsi enkampani avame kugcina idatha yemuntfu ngamunye yemakhasimende nobe yetisebenti, futsi kuvikela leyo datha kungumtfwalo wemtsetfo wenhlangano ngaphansi kweMtsetfo Wekuvikela Idatha Yemuntfu Ngamunye (PDPL). Kungenelela lokucala elithulusini letinjiniyela kuphele elwatini lwemakhasimende akho akutsatfwa njengendzaba yangekhatsi yetebuchwepheshe.

Umbono we-Origami

Lesehlakalo sisifundza njengesicinisekiso saloko lesikuphindza kuyo yonkhe iphrojekthi: kuvikeleka akusiso sici lesengetwa emkhicitweni lophelele, kodvwa kuyimphawu yendlela umkhicito lowakhiwa ngayo. Umehluko emkhatsini wenkampani lemelako nenkampani lewako akusiko kutsi itsenge emathulusi ekuvikela langakhi, kodvwa kutsi iyati yini kutsi igijimisani, ngubani umnikati wako, nekutsi kwagcina nini kuvuselelwa.

Kungako siphatsa luhlu lwemasistimu, kucokwa kwemnikati kanye nenchubomgomo yekuvuselela njengencenye yekuletfwa kwemsebenti hhayi njengentfo leyengetiwe longayikhetsa. Inkampani lengaphendvula ngekhatsi kwelihora linye kutsi igijimisa luhlobo luphi lwalo lonkhe lithulusi inelitfuba lemphela lekusebenta, ngobe nakufika imemetelo lefana neyalelivikini iyati masinyane kutsi iyayitsintsa yini, esikhundleni sekuchitsa livikini lonkhe ifuna kwati.

Sigcino

Butsakatsaka lobenta umlawuli wabeka sikhatsi sekugcina lesicinile bebungekho ku-interface lebhekene nemakhasimende. Bebukulithulusi langekhatsi lekwakucatjangwa kutsi alibonakali. Lesi sifundvo: emasistimu langakaze avele emhlanganweni wekwetfula ngiwo lagcina tikhiye. Cala ngeluhlu, nika yonkhe isistimu umnikati, futsi wente kuvuselela kube yinjwayelo hhayi kusabela esihlokweni setindzaba. Tinkampani letisindza etehlakalweni talolu hlobo atikahlakaniphi kakhulu. Tati nje kutsi tinani.

Imitfombo