Zofooka 4 zotsatirazi mu Ghostscript

Patatha milungu iwiri kuzindikira nkhani yakale yovuta mu Chizindikiro kudziwika Zowopsa zina 4 zofananira (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817), zomwe zimalola popanga ulalo wa ".forceput" kudutsa njira yodzipatula ya "-dSAFER" . Mukakonza zikalata zopangidwa mwapadera, wowukira atha kupeza zomwe zili mufayiloyo ndikupereka khodi yokhazikika padongosolo (mwachitsanzo, powonjezera malamulo ku ~/.bashrc kapena ~/.profile). Kukonzekera kumapezeka ngati zigamba (1, 2). Mutha kuyang'anira kupezeka kwa zosintha zamaphukusi pamagawidwe patsamba awa: Debian, Fedora, Ubuntu, SUSE/OpenSUSE, RHEL, Chipilala, ROSE, FreeBSD.

Tikukumbutseni kuti kusatetezeka mu Ghostscript kumabweretsa chiwopsezo chowonjezereka, chifukwa phukusili limagwiritsidwa ntchito m'mapulogalamu ambiri otchuka pokonza ma PostScript ndi ma PDF. Mwachitsanzo, Ghostscript imatchedwa panthawi yopanga thumbnail pakompyuta, kulondolera deta yakumbuyo, ndi kusintha kwa zithunzi. Kuti muwukire bwino, nthawi zambiri ndikwanira kungotsitsa fayiloyo ndikugwiritsa ntchito kapena kuyang'ana chikwatu ndi Nautilus. Zowopsa mu Ghostscript zitha kugwiritsidwanso ntchito pogwiritsa ntchito ma processor azithunzi kutengera phukusi la ImageMagick ndi GraphicsMagick powapatsira fayilo ya JPEG kapena PNG yokhala ndi code ya PostScript m'malo mwa chithunzi (fayilo yotereyi idzasinthidwa mu Ghostscript, popeza mtundu wa MIME umadziwika ndi zokhutira, komanso popanda kudalira zowonjezera).

Source: opennet.ru