Fedora 37 inachedwa masabata awiri chifukwa cha chiwopsezo chachikulu mu OpenSSL

Omwe akupanga pulojekiti ya Fedora adalengeza kuyimitsa kutulutsidwa kwa Fedora 37 mpaka Novembara 15 chifukwa chofuna kuthetsa chiwopsezo chachikulu mulaibulale ya OpenSSL. Popeza zambiri zokhudzana ndi chiwopsezochi zidzawululidwa pa Novembara 1 ndipo sizikudziwika kuti zitenga nthawi yayitali bwanji kuti agwiritse ntchito chitetezo pakugawa, adaganiza kuti achedwetse kutulutsidwa ndi masabata a 2. Aka sikanali koyamba kuti tsiku lotulutsidwa la Fedora 37 likuyembekezeka pa Okutobala 18, koma idaimitsidwa kawiri (ku October 25 ndi Novembala 1) chifukwa cholephera kukwaniritsa zofunikira.

Pakalipano, nkhani za 3 zimakhalabe zosakhazikika pamayesero omaliza ndipo zimayikidwa ngati zoletsa kumasulidwa. Kuphatikiza pakufunika kokonza chiwopsezo mu openssl, woyang'anira wophatikizika wa kwin amapachikidwa poyambitsa gawo la Wayland-based KDE Plasma pomwe mawonekedwe akhazikitsidwa kukhala nomodeset (zithunzi zoyambira) mu UEFI, ndipo kugwiritsa ntchito kalendala ya gnome kumaundana mukasintha mobwerezabwereza. zochitika.

Chiwopsezo chachikulu mu OpenSSL chimakhudza nthambi ya 3.0.x yokha; kutulutsa kwa 1.1.1x sikukhudzidwa. Nthambi ya OpenSSL 3.0 imagwiritsidwa ntchito kale pamagawidwe monga Ubuntu 22.04, CentOS Stream 9, RHEL 9, OpenMandriva 4.2, Gentoo, Fedora 36, ​​​​Debian Testing/Unstable. Mu SUSE Linux Enterprise 15 SP4 ndi openSUSE Leap 15.4, mapaketi okhala ndi OpenSSL 3.0 amapezeka mwakufuna kwawo, ma phukusi amachitidwe amagwiritsa ntchito nthambi ya 1.1.1. Debian 1, Arch Linux, Void Linux, Ubuntu 11, Slackware, ALT Linux, RHEL 20.04, OpenWrt, Alpine Linux 8 amakhalabe pa nthambi za OpenSSL 3.16.x.

Chiwopsezochi chimawerengedwa kuti ndi chovuta; zambiri sizinafotokozedwe, koma kutengera kuopsa kwake vutoli lili pafupi ndi chiopsezo cha Heartbleed. Mulingo wowopsa wangozi ukutanthauza kuthekera kwa kuwukira kwakutali pamasinthidwe wamba. Mavuto omwe amatsogolera ku kutayikira kwakutali kwazomwe zili pamakumbukiro a seva, kugwiritsa ntchito nambala yowukira, kapena kusokoneza makiyi achinsinsi a seva zitha kuonedwa ngati zovuta. Chigamba cha OpenSSL 3.0.7 chokonza vutolo komanso chidziwitso chokhudza kusatetezeka chidzasindikizidwa pa Novembara 1.

Source: opennet.ru