Sakin mai sarrafa fakitin Pacman 5.2

Akwai sakin mai sarrafa kunshin Pacman 5.2, ana amfani dashi a cikin rarrabawar Arch Linux. Daga canje-canje iya bambancewa:

• An cire goyan bayan sabuntawar delta gaba ɗaya, yana barin canje-canje kawai a zazzage. An cire fasalin saboda wani rauni da aka gano (CVE-2019-18183), wanda ke ba ka damar gudanar da umarni na sabani a cikin tsarin lokacin amfani da bayanan da ba a sanya hannu ba. Don harin, ya zama dole ga mai amfani don zazzage fayilolin da maharin ya shirya tare da bayanan bayanai da sabuntawar delta. An kashe goyan bayan sabuntawar delta ta tsohuwa kuma ba a yi amfani da shi sosai ba. A nan gaba, an shirya don sake rubutawa gaba ɗaya aiwatar da sabuntawar delta;
• An gyara rauni a cikin mai sarrafa umarni XferCommand (CVE-2019-18182), ba da izini, a yayin harin MITM da kuma bayanan da ba a sanya hannu ba, don cimma aiwatar da umarninsa a cikin tsarin;
• Makepkg ya ƙara ikon haɗa masu sarrafa don zazzage fakitin tushe da dubawa ta sa hannun dijital. Ƙara goyon baya don matsawa fakiti ta amfani da lzip, lz4 da zstd algorithms. Ƙara goyon baya don matsawa bayanai ta amfani da zstd don sake ƙarawa. Yana zuwa nan ba da jimawa ba Arch Linux sa ran canzawa zuwa yin amfani da zstd ta tsohuwa, wanda, idan aka kwatanta da "xz" algorithm, zai hanzarta ayyukan damfara da ƙwanƙwasa fakiti, yayin da yake kiyaye matakin matsawa;
• Yana yiwuwa a haɗa ta amfani da tsarin Meson maimakon Autotools. A cikin saki na gaba, Meson zai maye gurbin Autotools gaba daya;
• Ƙara goyon baya don loda maɓallan PGP ta amfani da Jagorar Mabuɗin Yanar Gizo (WKD), ainihin abin shine sanya maɓallan jama'a akan gidan yanar gizo tare da hanyar haɗi zuwa yankin da aka ƙayyade a cikin adireshin gidan waya. Misali, ga address"[email kariya]"Za a iya sauke maɓallin ta hanyar haɗin yanar gizon" https://example.com/.well-known/openpgpkey/hu/183d7d5ab73cfc5ece9a5f94e6039d5a". Ana kunna maɓallan lodawa ta hanyar WKD ta tsohuwa a cikin pacman, pacman-key da makepkg;
• An cire zaɓin "-force", maimakon wanda zaɓin "--overwrite", wanda ya fi dacewa da ainihin ainihin aikin, an gabatar da shi fiye da shekara guda da ta wuce;
• Sakamakon binciken fayil ta amfani da zaɓi -F yana ba da faɗaɗa bayanai kamar rukunin fakiti da matsayi na shigarwa.

source: budenet.ru