{"id":24822,"date":"2019-07-16T00:00:00","date_gmt":"2019-07-16T00:00:00","guid":{"rendered":"https:\/\/www.mailgun.com\/blog\/ghost-mitigado-metodologia-aplicacao-patches\/"},"modified":"2026-09-16T17:51:59","modified_gmt":"2026-09-16T17:51:59","slug":"ghost-mitigado-metodologia-aplicacao-patches","status":"publish","type":"blog","link":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/","title":{"rendered":"GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><b>Isso foi originalmente publicado em 29 de janeiro de 2015.<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A Mailgun concluiu a aplica\u00e7\u00e3o de patches em toda a nossa infraestrutura contra a rec\u00e9m-anunciada\u00a0<a href=\"http:\/\/www.openwall.com\/lists\/oss-security\/2015\/01\/27\/9\" target=\"_tabs\" rel=\"noopener noreferrer\">vulnerabilidade de seguran\u00e7a GHOST<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A GHOST \u00e9 uma vulnerabilidade de seguran\u00e7a na fam\u00edlia de fun\u00e7\u00f5es\u00a0<code>gethostbyname*()<\/code>\u00a0da GNU C Library (glibc). Essa vulnerabilidade espec\u00edfica permite assumir o controle de um servidor por meio de um exploit local ou remoto.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Monitoramos nossos logs e n\u00e3o temos motivos para acreditar que nossa infraestrutura tenha sido explorada; esta foi uma medida totalmente preventiva. Nenhum dado de cliente foi perdido ou afetado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Recomendamos fortemente que todos os clientes revisem e tamb\u00e9m apliquem os devidos patches em sua infraestrutura.<\/p>\n\n\n\r\n    <nav data-content-type=\"longform\" class=\"toc-block longform-spacings px-5 py-6 px-md-6 px-lg-7 py-md-7 bg-light fs-sm rounded-lg\" aria-labelledby=\"toc-title-7254\"><p class=\"h5 m-0\" id=\"toc-title-7254\">\u00cdndice<\/p><div class=\"d-flex mt-3\"><div class=\"w-auto fw-bold text-accent d-flex me-2\">01<\/div><div class=\"d-flex flex-column\"><a class=\"fw-bold scrollme link-body-color text-accent\" href=\"#nossa-metodologia-de-aplicacao-de-patches\">Nossa metodologia de aplica\u00e7\u00e3o de patches<\/a><\/div><\/div><\/nav>\n\n\n<h2 class=\"wp-block-heading\">Nossa metodologia de aplica\u00e7\u00e3o de patches<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Para dar uma ideia da nossa postura de seguran\u00e7a aqui na Mailgun, gostaria de compartilhar as informa\u00e7\u00f5es a seguir sobre como lidamos com vulnerabilidades de seguran\u00e7a.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Tentamos minimizar os efeitos para nossos clientes. Isso significa que normalmente fazemos atualiza\u00e7\u00f5es cont\u00ednuas para garantir que uma parte da Mailgun esteja sempre em execu\u00e7\u00e3o. Isso leva mais tempo, mas nos permite minimizar o tempo de inatividade.<\/li>\n\n\n\n<li>No caso de vulnerabilidades de seguran\u00e7a que v\u00eam com uma prova de conceito (POC) e\/ou s\u00e3o exploits remotos de servi\u00e7os que executamos, aplicamos esses patches imediatamente. Tamb\u00e9m verificamos nossos logs para garantir que ningu\u00e9m conseguiu explorar a vulnerabilidade com sucesso antes de aplicarmos o patch.<\/li>\n\n\n\n<li>Para vulnerabilidades de seguran\u00e7a que n\u00e3o v\u00eam com uma POC e\/ou s\u00e3o exploits locais, geralmente aplicamos patches na nossa infraestrutura de acordo com nosso cronograma. Fazemos isso porque a transi\u00e7\u00e3o de um bug para um exploit demora mais do que o nosso per\u00edodo de aplica\u00e7\u00e3o de patches.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Somos bastante diligentes quanto \u00e0 aplica\u00e7\u00e3o de atualiza\u00e7\u00f5es de seguran\u00e7a sempre que ficam dispon\u00edveis. Embora possa parecer uma forma de prote\u00e7\u00e3o da infraestrutura de servidores com baixo retorno, na verdade, isso aumenta a dificuldade dos ataques. Manter sua infraestrutura com os patches em dia torna ferramentas automatizadas ineficazes e exige que se encontre um bug na nossa configura\u00e7\u00e3o de servidor ou na pr\u00f3pria aplica\u00e7\u00e3o, o que eleva muito o n\u00edvel de sofistica\u00e7\u00e3o dos ataques.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A Mailgun concluiu a aplica\u00e7\u00e3o de patches em toda a nossa infraestrutura contra a vulnerabilidade de seguran\u00e7a GHOST recentemente anunciada.<\/p>\n","protected":false},"author":13,"featured_media":4843,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"blog_category":[23],"class_list":["post-24822","blog","type-blog","status-publish","has-post-thumbnail","hentry","blog_category-it-and-engineering"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches - Transactional Email API Service For Developers | Mailgun<\/title>\n<meta name=\"description\" content=\"Uma an\u00e1lise da vulnerabilidade de infraestrutura GHOST ocorrida em janeiro de 2015. Leia mais \u2013\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches - Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"og:description\" content=\"Uma an\u00e1lise da vulnerabilidade de infraestrutura GHOST ocorrida em janeiro de 2015. Leia mais \u2013\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/\" \/>\n<meta property=\"og:site_name\" content=\"Transactional Email API Service For Developers | Mailgun\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-16T17:51:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"448\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/it-and-engineering\\\/ghost-mitigado-metodologia-aplicacao-patches\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/it-and-engineering\\\/ghost-mitigado-metodologia-aplicacao-patches\\\/\",\"name\":\"GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches - Transactional Email API Service For Developers | Mailgun\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/it-and-engineering\\\/ghost-mitigado-metodologia-aplicacao-patches\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/it-and-engineering\\\/ghost-mitigado-metodologia-aplicacao-patches\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"datePublished\":\"2019-07-16T00:00:00+00:00\",\"dateModified\":\"2026-09-16T17:51:59+00:00\",\"description\":\"Uma an\u00e1lise da vulnerabilidade de infraestrutura GHOST ocorrida em janeiro de 2015. Leia mais \u2013\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/it-and-engineering\\\/ghost-mitigado-metodologia-aplicacao-patches\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/it-and-engineering\\\/ghost-mitigado-metodologia-aplicacao-patches\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/it-and-engineering\\\/ghost-mitigado-metodologia-aplicacao-patches\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/MG-Blog-IT-Engineering.png\",\"width\":720,\"height\":448},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/it-and-engineering\\\/ghost-mitigado-metodologia-aplicacao-patches\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/inicio\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#website\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"description\":\"Poderosas APIs de e-mail transacional que permitem a voc\u00ea enviar, receber e rastrear e-mails, criadas com os desenvolvedores em mente. Saiba mais hoje mesmo!\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#organization\",\"name\":\"Transactional Email API Service For Developers | Mailgun\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"contentUrl\":\"https:\\\/\\\/www.mailgun.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/cropped-android-chrome-512x512-1.png\",\"width\":512,\"height\":512,\"caption\":\"Transactional Email API Service For Developers | Mailgun\"},\"image\":{\"@id\":\"https:\\\/\\\/www.mailgun.com\\\/pt\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches - Transactional Email API Service For Developers | Mailgun","description":"Uma an\u00e1lise da vulnerabilidade de infraestrutura GHOST ocorrida em janeiro de 2015. Leia mais \u2013","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/","og_locale":"pt_BR","og_type":"article","og_title":"GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches - Transactional Email API Service For Developers | Mailgun","og_description":"Uma an\u00e1lise da vulnerabilidade de infraestrutura GHOST ocorrida em janeiro de 2015. Leia mais \u2013","og_url":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/","og_site_name":"Transactional Email API Service For Developers | Mailgun","article_modified_time":"2026-09-16T17:51:59+00:00","og_image":[{"width":720,"height":448,"url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/","url":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/","name":"GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches - Transactional Email API Service For Developers | Mailgun","isPartOf":{"@id":"https:\/\/www.mailgun.com\/pt\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/#primaryimage"},"image":{"@id":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","datePublished":"2019-07-16T00:00:00+00:00","dateModified":"2026-09-16T17:51:59+00:00","description":"Uma an\u00e1lise da vulnerabilidade de infraestrutura GHOST ocorrida em janeiro de 2015. Leia mais \u2013","breadcrumb":{"@id":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/#primaryimage","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/07\/MG-Blog-IT-Engineering.png","width":720,"height":448},{"@type":"BreadcrumbList","@id":"https:\/\/www.mailgun.com\/pt\/blog\/it-and-engineering\/ghost-mitigado-metodologia-aplicacao-patches\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.mailgun.com\/pt\/inicio\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/www.mailgun.com\/pt\/blog\/"},{"@type":"ListItem","position":3,"name":"GHOST mitigado e nossa metodologia de aplica\u00e7\u00e3o de patches"}]},{"@type":"WebSite","@id":"https:\/\/www.mailgun.com\/pt\/#website","url":"https:\/\/www.mailgun.com\/pt\/","name":"Transactional Email API Service For Developers | Mailgun","description":"Poderosas APIs de e-mail transacional que permitem a voc\u00ea enviar, receber e rastrear e-mails, criadas com os desenvolvedores em mente. Saiba mais hoje mesmo!","publisher":{"@id":"https:\/\/www.mailgun.com\/pt\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mailgun.com\/pt\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/www.mailgun.com\/pt\/#organization","name":"Transactional Email API Service For Developers | Mailgun","url":"https:\/\/www.mailgun.com\/pt\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.mailgun.com\/pt\/#\/schema\/logo\/image\/","url":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","contentUrl":"https:\/\/www.mailgun.com\/wp-content\/uploads\/2025\/06\/cropped-android-chrome-512x512-1.png","width":512,"height":512,"caption":"Transactional Email API Service For Developers | Mailgun"},"image":{"@id":"https:\/\/www.mailgun.com\/pt\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/blog\/24822","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/users\/13"}],"version-history":[{"count":0,"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/blog\/24822\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/media\/4843"}],"wp:attachment":[{"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/media?parent=24822"}],"wp:term":[{"taxonomy":"blog_category","embeddable":true,"href":"https:\/\/www.mailgun.com\/pt\/wp-json\/wp\/v2\/blog_category?post=24822"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}