Rashin lahani a cikin Ghostscript wanda ke ba da damar aiwatar da lamba lokacin buɗe takaddar PostScript

A cikin Ghostscript, saitin kayan aikin don sarrafawa, canzawa da samar da takardu a cikin PostScript da tsarin PDF, gano rauni (CVE-2020-15900), wanda zai iya haifar da canza fayiloli da aiwatar da umarni na sabani lokacin buɗe takaddun PostScript na musamman. Amfani da ma'aikacin PostScript mara daidaituwa a cikin daftarin aiki bincike yana ba ku damar haifar da ambaliya na nau'in uint32_t lokacin ƙididdige girman, sake rubuta wuraren ƙwaƙwalwar ajiya a waje da buffer ɗin da aka keɓe kuma sami damar yin amfani da fayiloli a cikin FS, waɗanda za a iya amfani da su don tsara harin don aiwatar da lambar sabani akan tsarin (misali, ta ƙara umarni zuwa ~/.bashrc ko ~/. profile).

Matsalar tana shafar batutuwa daga 9.50 zuwa 9.52 (kuskure ba tun daga saki 9.28rc1, amma, bisa ga bayarwa masu binciken da suka gano raunin, ya bayyana tun sigar 9.50).

Gyaran da aka gabatar a cikin saki 9.52.1 (faci). An riga an fitar da sabuntawar fakitin Hotfix don Debian, Ubuntu, SUSE. Fakitin ciki RHEL matsalolin ba su shafi.

Bari mu tunatar da ku cewa raunin da ke cikin Ghostscript yana haifar da ƙarin haɗari, tunda ana amfani da wannan fakitin a cikin shahararrun aikace-aikace don sarrafa tsarin PostScript da PDF. Misali, ana kiran Ghostscript yayin ƙirƙirar babban hoto na tebur, firikwensin bayanan baya, da canza hoto. Don nasarar harin, a yawancin lokuta ya isa kawai zazzage fayil ɗin tare da amfani ko bincika kundin adireshi tare da shi a cikin Nautilus. Hakanan za'a iya amfani da rashin ƙarfi a cikin Ghostscript ta hanyar masu sarrafa hoto dangane da fakitin ImageMagick da GraphicsMagick ta hanyar wuce su fayil ɗin JPEG ko PNG mai ɗauke da lambar PostScript maimakon hoto (irin wannan fayil ɗin za'a sarrafa shi cikin Ghostscript, tunda nau'in MIME ana gane shi ta hanyar abun ciki, kuma ba tare da dogara ga tsawo ba).

source: budenet.ru

Add a comment