Ib kab laum hauv OpenSSL tsoo qee qhov kev siv openSUSE Tumbleweed tom qab hloov tshiab

Hloov kho OpenSSL rau version 1.1.1b hauv openSUSE Tumbleweed repository coj к ua txhaum cai kev ua tau zoo ntawm qee daim ntawv thov cuam tshuam nrog libopenssl thiab siv Lavxias lossis Ukrainian thaj chaw. Qhov teeb meem tshwm sim tom qab ntxiv nws rau OpenSSL hloov mus rau qhov yuam kev xov tsis handler (SYS_str_reasons). Cov tsis tau txhais ntawm 4 kilobytes, tab sis qhov no tsis txaus rau qee qhov chaw hauv Unicode.

Cov zis ntawm strerror_r, siv los sau qhov tsis, yog 6856 bytes rau thaj chaw Lavxias, thiab 7000 rau thaj chaw Ukrainian. Hauv OpenSSL code, pib yog xyuas kom dhau, tab sis nws yog thaum tus Tsov tus tw raug txiav tawm coj mus rau hauv tus account qhov loj yog ib byte loj dua tus nqi tiag tiag, uas ua rau ib tug-byte overflow thiab poob thaum loading yuam kev code transcripts uas ntev dhau lawm.

Tam sim no twb npaj lawm kho, tab sis nws tseem tsis tau txais. Txhawm rau yob rov qab mus rau yav dhau los ruaj khov version (OpenSSL 1.1.0h) koj tuaj yeem khiav cov lus txib hauv qab no:

sudo zypper hauv tumbleweed-cli
sudo tumbleweed nyob rau hauv nws
sudo tumbleweed hloov 20190514
sudo zypper ref && sudo zypper dup && sudo zypper inr

Tau qhov twg los: opennet.ru