Hloov chaw Python 3.5.8, ib qho tsis raug version raug faib los ntawm kev ua yuam kev

Vim yog qhov yuam kev thaum npaj caching hauv cov ntsiab lus xa khoom, thaum sim rub tawm ib qho ntawm cov rooj sib txoos luam tawm hnub ua ntej nag hmo kho qhov tso tawm Nab hab sej 3.5.8 kis mus Ib tug saib ua ntej tsim uas tsis muaj tag nrho cov fixes. Teeb meem kov rau archive nkaus xwb Python-3.5.8.tar.xz, sib dhos Python-3.5.8.tgz faib kom raug.

Txhua tus neeg siv uas rub tawm cov ntaub ntawv "Python-3.5.8.tar.xz" hauv thawj 12 teev tom qab tso tawm tau qhia kom kuaj xyuas qhov tseeb ntawm cov ntaub ntawv rub tawm siv cov checksum (MD5 4464517ed6044bca4fc78ea9ed086c36). Tsis zoo li qhov kev tso tawm zaum kawg, qhov saib ua ntej version tsis suav nrog kho yooj yim CVE-2019-16935 hauv XML-RPC server code. Qhov tsis txaus ntseeg tau tso cai rau kev txhaj tshuaj JavaScript (XSS) los ntawm server_title teb vim tsis muaj lub kaum sab xis khiav tawm. Tus neeg tawm tsam tuaj yeem ua tiav JavaScript hloov pauv yog tias daim ntawv thov teeb tsa lub npe server raws li tus neeg siv nkag (piv txwv li, "server.set_server_name('test ’)Β»).

Tau qhov twg los: opennet.ru

Ntxiv ib saib