Mmelite GnuPG 2.2.23 na ndozi adịghị ike dị oke egwu

bipụtara mwepụta ngwa ngwa GnuPG 2.2.23 (GNU Privacy Guard), dakọtara na ụkpụrụ OpenPGP (Mgbasa ozi RF-4880) na S/MIME, ma na-enye akụrụngwa maka izo ya ezo data, na-arụ ọrụ na mbinye aka electronic, isi njikwa na ịnweta ụlọ ahịa igodo ọha. Ụdị ọhụrụ ahụ na-edozi adịghị ike dị egwu (CVE-2020-25125), nke na-egosi malite na ụdị 2.2.21 ma na-erigbu mgbe ị na-ebubata igodo OpenPGP ahaziri ahazi.

Ibubata igodo nwere nnukwu ndepụta nke AEAD algọridim nwere ike bute oke njupụta na mkpọka ma ọ bụ omume enweghị nkọwa. A na-achọpụta na ịmepụta nrigbu nke na-eduga ọ bụghị nanị na ịdaba bụ ọrụ siri ike, mana enweghị ike iwepụ ohere dị otú ahụ. Isi ihe isi ike n'ịzụlite nrigbu bụ n'ihi na onye na-awakpo ahụ nwere ike ịchịkwa byte nke abụọ ọ bụla nke usoro, na byte mbụ na-ewekarị uru 0x04. Sistemụ nkesa sọftụwia nwere nkwenye igodo dijitalụ adịghị mma n'ihi na ha na-eji ndepụta igodo akọwapụtagoro.

isi: opennet.ru

Tinye a comment