sakin sabar wasiku ba tare da an tsara shi ba wanda ke kawar da mummunan rauni (CVE-2019-13917) wanda ke ba da damar aiwatar da lambar nesa tare da gata na tushen lokacin da akwai wasu takamaiman saitunan sanyi.
Varfafawa Farawa da sakin 4.85, lokacin amfani da mai aiki "${sort}" a cikin tsari, idan abubuwan da aka yi amfani da su a cikin jerin "sort" za a iya tura su zuwa ga mai kai hari (misali, ta hanyar masu canjin $local_part da $domain). Ta hanyar tsoho, ba a amfani da wannan mai aiki a cikin tsari da aka bayar a cikin rarraba Exim na asali da kuma a cikin fakitin don Debian ΠΈ Ubuntu (WataΖila a wasu rarrabawa ma). Don duba yanayin raunin tsarinka, zaka iya gudanar da umarnin "exim -bP config | grep sort".
An riga an fitar da sabbin abubuwan da ke gyara raunin da ke tattare da fakitin don ΠΈ Sabuntawa ba a shirye ba tukuna , , ΠΈ RHEL da CentOS matsala , tunda Exim ba a haΙa shi cikin ma'ajiyar fakitin su na yau da kullun ba (idan ya cancanta, ana shigar da shi daga ma'ajiyar ).
source: budenet.ru
