{"id":24717,"date":"2019-07-16T00:00:00","date_gmt":"2019-07-16T00:00:00","guid":{"rendered":"https:\/\/www.mailgun.com\/blog\/faille-ghost-corrigee-methodologie-mise-a-jour\/"},"modified":"2026-09-16T16:57:17","modified_gmt":"2026-09-16T16:57:17","slug":"faille-ghost-corrigee-methodologie-mise-a-jour","status":"publish","type":"blog","link":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/","title":{"rendered":"Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><b>Cet article a \u00e9t\u00e9 publi\u00e9 initialement le 29 janvier 2015.<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mailgun a termin\u00e9 la mise \u00e0 jour de toute son infrastructure pour contrer la faille r\u00e9cemment annonc\u00e9e,\u00a0<a href=\"http:\/\/www.openwall.com\/lists\/oss-security\/2015\/01\/27\/9\" target=\"_tabs\" rel=\"noopener noreferrer\">la vuln\u00e9rabilit\u00e9 de s\u00e9curit\u00e9 GHOST<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">GHOST est une faille de s\u00e9curit\u00e9 pr\u00e9sente dans la famille de fonctions\u00a0<code>gethostbyname*()<\/code>\u00a0de la biblioth\u00e8que GNU C (glibc). Cette vuln\u00e9rabilit\u00e9 permet \u00e0 un attaquant de prendre potentiellement le contr\u00f4le d&rsquo;un serveur via une exploitation locale ou \u00e0 distance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nous avons surveill\u00e9 nos journaux et n&rsquo;avons aucune raison de croire qu&rsquo;un attaquant a exploit\u00e9 notre infrastructure ; il s&rsquo;agissait d&rsquo;une mesure enti\u00e8rement pr\u00e9ventive. Aucune donn\u00e9e de la client\u00e8le n&rsquo;a \u00e9t\u00e9 perdue ou affect\u00e9e.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nous recommandons vivement \u00e0 notre client\u00e8le de v\u00e9rifier et de mettre \u00e0 jour son infrastructure en cons\u00e9quence.<\/p>\n\n\n\r\n    <nav data-content-type=\"longform\" class=\"toc-block longform-spacings px-5 py-6 px-md-6 px-lg-7 py-md-7 bg-light fs-sm rounded-lg\" aria-labelledby=\"toc-title-8940\"><p class=\"h5 m-0\" id=\"toc-title-8940\">Table des mati\u00e8res<\/p><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">01<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#notre-methodologie-de-mise-a-jour\">Notre m\u00e9thodologie de mise \u00e0 jour<\/a><\/div><\/div><\/nav>\n\n\n<h2 class=\"wp-block-heading\">Notre m\u00e9thodologie de mise \u00e0 jour<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Pour vous donner un aper\u00e7u de notre posture de s\u00e9curit\u00e9 chez Mailgun, j&rsquo;aimerais partager les informations suivantes sur la fa\u00e7on dont nous g\u00e9rons les failles de s\u00e9curit\u00e9.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Nous essayons de minimiser l&rsquo;impact sur notre client\u00e8le. Cela signifie que nous effectuons g\u00e9n\u00e9ralement des mises \u00e0 jour progressives pour garantir qu&rsquo;une partie de Mailgun reste toujours op\u00e9rationnelle. Cela prend plus de temps, mais nous permet de r\u00e9duire les temps d&rsquo;arr\u00eat au minimum.<\/li>\n\n\n\n<li>Pour les failles de s\u00e9curit\u00e9 accompagn\u00e9es d&rsquo;une preuve de concept (POC) ou qui font l&rsquo;objet d&rsquo;une exploitation \u00e0 distance visant les services que nous ex\u00e9cutons, nous appliquons ces correctifs imm\u00e9diatement. Nous v\u00e9rifions \u00e9galement nos journaux pour nous assurer que personne n&rsquo;a pu exploiter la faille avec succ\u00e8s avant que nous puissions la corriger.<\/li>\n\n\n\n<li>Pour les failles de s\u00e9curit\u00e9 sans POC ou qui font l&rsquo;objet d&rsquo;une exploitation locale, nous mettons g\u00e9n\u00e9ralement \u00e0 jour notre infrastructure selon notre calendrier de mise \u00e0 jour. Nous proc\u00e9dons ainsi, car le passage d&rsquo;un bogue \u00e0 son exploitation prend plus de temps que notre cycle de mise \u00e0 jour.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Nous sommes assez rigoureux quant \u00e0 l&rsquo;application des mises \u00e0 jour de s\u00e9curit\u00e9 d\u00e8s qu&rsquo;elles sont disponibles. Bien que cela puisse sembler peu rentable pour prot\u00e9ger l&rsquo;infrastructure de nos serveurs, cela complique en r\u00e9alit\u00e9 la t\u00e2che des attaquants. Maintenir une infrastructure \u00e0 jour rend les outils automatis\u00e9s inefficaces et oblige les attaquants \u00e0 trouver un bogue dans la configuration de nos serveurs ou dans notre application elle-m\u00eame, ce qui rehausse consid\u00e9rablement le niveau de sophistication requis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Mailgun a termin\u00e9 la mise \u00e0 jour de l&rsquo;ensemble de son infrastructure contre la faille de s\u00e9curit\u00e9 GHOST annonc\u00e9e r\u00e9cemment.<\/p>\n","protected":false},"author":13,"featured_media":4843,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"blog_category":[23],"class_list":["post-24717","blog","type-blog","status-publish","has-post-thumbnail","hentry","blog_category-it-and-engineering"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour - Transactional Email API Service For Developers | Mailgun<\/title>\n<meta name=\"description\" content=\"Retour sur la faille de s\u00e9curit\u00e9 de l&#039;infrastructure GHOST survenue en janvier 2015. En savoir plus \u2013\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour - Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"og:description\" content=\"Retour sur la faille de s\u00e9curit\u00e9 de l&#039;infrastructure GHOST survenue en janvier 2015. En savoir plus \u2013\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/\" \/>\n<meta property=\"og:site_name\" content=\"Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-16T16:57:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/it-and-engineering\\\/faille-ghost-corrigee-methodologie-mise-a-jour\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/it-and-engineering\\\/faille-ghost-corrigee-methodologie-mise-a-jour\\\/\",\"name\":\"Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour - Transactional Email API Service For Developers | Mailgun\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/it-and-engineering\\\/faille-ghost-corrigee-methodologie-mise-a-jour\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/it-and-engineering\\\/faille-ghost-corrigee-methodologie-mise-a-jour\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"datePublished\":\"2019-07-16T00:00:00+00:00\",\"dateModified\":\"2026-09-16T16:57:17+00:00\",\"description\":\"Retour sur la faille de s\u00e9curit\u00e9 de l'infrastructure GHOST survenue en janvier 2015. En savoir plus \u2013\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/it-and-engineering\\\/faille-ghost-corrigee-methodologie-mise-a-jour\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/it-and-engineering\\\/faille-ghost-corrigee-methodologie-mise-a-jour\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/it-and-engineering\\\/faille-ghost-corrigee-methodologie-mise-a-jour\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"width\":720,\"height\":448},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/it-and-engineering\\\/faille-ghost-corrigee-methodologie-mise-a-jour\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#website\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"description\":\"Des API d\u2019emails transactionnels puissantes qui vous permettent d'envoyer, de recevoir et de suivre des emails, con\u00e7ues pour les d\u00e9veloppeurs. En savoir plus d\u00e8s aujourd'hui !\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#organization\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"width\":512,\"height\":512,\"caption\":\"Transactional Email API Service For Developers | Mailgun\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/fr\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour - Transactional Email API Service For Developers | Mailgun","description":"Retour sur la faille de s\u00e9curit\u00e9 de l'infrastructure GHOST survenue en janvier 2015. En savoir plus \u2013","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/","og_locale":"fr_FR","og_type":"article","og_title":"Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour - Transactional Email API Service For Developers | Mailgun","og_description":"Retour sur la faille de s\u00e9curit\u00e9 de l'infrastructure GHOST survenue en janvier 2015. En savoir plus \u2013","og_url":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/","og_site_name":"Transactional Email API Service For Developers | Mailgun","article_modified_time":"2026-09-16T16:57:17+00:00","og_image":[{"width":720,"height":448,"url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/","url":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/","name":"Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour - Transactional Email API Service For Developers | Mailgun","isPartOf":{"@id":"https:\/\/www.mailgun.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/#primaryimage"},"image":{"@id":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","datePublished":"2019-07-16T00:00:00+00:00","dateModified":"2026-09-16T16:57:17+00:00","description":"Retour sur la faille de s\u00e9curit\u00e9 de l'infrastructure GHOST survenue en janvier 2015. En savoir plus \u2013","breadcrumb":{"@id":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/#primaryimage","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","width":720,"height":448},{"@type":"BreadcrumbList","@id":"https:\/\/www.mailgun.com\/fr\/blog\/it-and-engineering\/faille-ghost-corrigee-methodologie-mise-a-jour\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mailgun.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/www.mailgun.com\/fr\/blog\/"},{"@type":"ListItem","position":3,"name":"Vuln\u00e9rabilit\u00e9 GHOST corrig\u00e9e et notre m\u00e9thodologie de mise \u00e0 jour"}]},{"@type":"WebSite","@id":"https:\/\/www.mailgun.com\/fr\/#website","url":"https:\/\/www.mailgun.com\/fr\/","name":"Transactional Email API Service For Developers | Mailgun","description":"Des API d\u2019emails transactionnels puissantes qui vous permettent d'envoyer, de recevoir et de suivre des emails, con\u00e7ues pour les d\u00e9veloppeurs. En savoir plus d\u00e8s aujourd'hui !","publisher":{"@id":"https:\/\/www.mailgun.com\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mailgun.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.mailgun.com\/fr\/#organization","name":"Transactional Email API Service For Developers | Mailgun","url":"https:\/\/www.mailgun.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.mailgun.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","width":512,"height":512,"caption":"Transactional Email API Service For Developers | Mailgun"},"image":{"@id":"https:\/\/www.mailgun.com\/fr\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog\/24717","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/users\/13"}],"version-history":[{"count":0,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog\/24717\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/media\/4843"}],"wp:attachment":[{"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/media?parent=24717"}],"wp:term":[{"taxonomy":"blog_category","embeddable":true,"href":"https:\/\/www.mailgun.com\/fr\/wp-json\/wp\/v2\/blog_category?post=24717"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}