ʻO nā vulnerabilities 4 e hiki mai ana ma Ghostscript

ʻElua pule ma hope ʻike ʻana pilikia pilikia i hala ma Palapala Hemolele ʻike ʻia 4 mau mea nawaliwali like (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817), e hiki ai ma ka hana ʻana i kahi loulou i ".forceput" e kāpae i ke ʻano hoʻokaʻawale "-dSAFER" . I ka wā e hoʻoponopono ai i nā palapala i hoʻolālā kūikawā ʻia, hiki i ka mea hoʻouka ke komo i nā ʻike o ka ʻōnaehana faila a hoʻokō i nā code arbitrary ma ka ʻōnaehana (no ka laʻana, ma ka hoʻohui ʻana i nā kauoha iā ~/.bashrc a i ʻole ~/.profile). Loaʻa ka hoʻoponopono ma ke ʻano he pā (1, 2). Hiki iā ʻoe ke hahai i ka loaʻa ʻana o nā hōʻano hou o ka pūʻolo ma nā māhele ʻana ma kēia mau ʻaoʻao: Debian, ʻO Fedora, Ubuntu, SUSE/openSUSE, RHEL, e pio mai, ʻĀʻOLIE, FreeBSD.

E hoʻomanaʻo mākou iā ʻoe i nā nāwaliwali o Ghostscript e hoʻonui i ka pōʻino, no ka mea, hoʻohana ʻia kēia pūʻulu i nā noi kaulana no ka hoʻoponopono ʻana i nā palapala PostScript a me PDF. No ka laʻana, kāhea ʻia ʻo Ghostscript i ka wā o ka hoʻokumu ʻana i ka liʻiliʻi liʻiliʻi o ka desktop, ka helu helu ʻikepili hope, a me ka hoʻololi kiʻi. No ka hoʻouka kaua kūleʻa, i nā manawa he nui ua lawa ia e hoʻoiho wale i ka faila me ka hoʻohana a nānā i ka papa kuhikuhi me ia ma Nautilus. Hiki ke hoʻohana ʻia nā vulnerabilities ma Ghostscript ma o nā mea hoʻoili kiʻi e pili ana i nā pūʻolo ImageMagick a me GraphicsMagick ma ka hāʻawi ʻana iā lākou i kahi faila JPEG a i ʻole PNG i loaʻa i ka code PostScript ma kahi o kahi kiʻi (e hana ʻia kēlā faila ma Ghostscript, no ka mea, ʻike ʻia ke ʻano MIME e ka maʻiʻo, a me ka hilinaʻi ʻole i ka hoʻonui).

Source: opennet.ru