Lalacewar tushen gida a cikin pam-python

A cikin abin da aikin ya bayar pam-python PAM module, wanda ke ba ku damar haɗa abubuwan tantancewa a cikin Python, gano rauni (CVE-2019-16729), yana ba ku damar haɓaka gata a cikin tsarin. Lokacin amfani da sigar pam-python mai rauni (ba a shigar da shi ta tsohuwa ba), mai amfani na gida zai iya samun tushen tushen ta magudi tare da masu canjin yanayi wanda Python ke sarrafa ta ta tsohuwa (misali, zaku iya jawo ajiyar fayil ɗin bytecode don sake rubuta fayilolin tsarin).

Rashin lahani yana nan a cikin sabon ingantaccen sakin 1.0.6, wanda aka bayar tun watan Agusta 2016. An gano matsalar a yayin binciken tsarin pam-python PAM wanda masu haɓakawa daga ƙungiyar suka gudanar OpenSUSE Tsaro Team, kuma an riga an gyara shi a cikin sabuntawa 1.0.7. Kuna iya bin diddigin halin sabuntawa na fakitin pam-python akan shafuka masu zuwa: Debian, Ubuntu, SUSE/budeSUSE. A cikin Fedora da RHEL module ba a kawota ba.

source: budenet.ru

Add a comment