Zazzage kalmar sirri don ɓoyayyen ɓangarori a cikin log ɗin shigarwar uwar garken Ubuntu

Canonical aka buga gyara sakin mai sakawa Babban Shafi 20.05.2, wanda shine tsoho don shigarwar uwar garken Ubuntu wanda ya fara da sakin 18.04 lokacin shigarwa a Yanayin Live. An cire a cikin sabon sakin matsalar tsaro (CVE-2020-11932), lalacewa ta hanyar adanawa a cikin log ɗin kalmar sirri da mai amfani ya ƙayyade don samun damar ɓoyayyen ɓangaren LUKS da aka ƙirƙira yayin shigarwa. Sabuntawa iso images tare da gyara don raunin har yanzu ba a buga shi ba, amma sabon sigar Subiquity tare da gyarawa aka buga a cikin Snap Store directory, daga abin da mai sakawa za a iya sabunta lokacin da zazzagewa a cikin Yanayin Live, a matakin kafin fara shigarwar tsarin.

An adana kalmar sirri don ɓoyayyen ɓoyayyen ɓoyayyen rubutu a cikin fayilolin autoinstall-user-data, curtin-install-cfg.yaml, curtin-install.log, installer-journal.txt da subquity-curtin-install.conf, an ajiye su bayan shigarwa a cikin / directory var/log/installer. A cikin saitunan da ba a ɓoye ɓoyayyen ɓangaren / var ba, idan tsarin ya faɗi cikin hannun da ba daidai ba, ana iya fitar da kalmar sirri don ɓoyayyen ɓoyayyun fayiloli daga waɗannan fayilolin, wanda ke hana amfani da ɓoyewa.

source: budenet.ru

Add a comment