Chiwopsezo mu Ark ya KDE chomwe chimalola mafayilo kuti alembetsedwenso mukatsegula zakale

Mu Ark archive manager yopangidwa ndi polojekiti ya KDE kudziwika kusatetezeka (CVE-2020-16116), yomwe imalola, potsegula zosungidwa mwapadera mu pulogalamuyo, kuti ilembetse mafayilo kunja kwa chikwatu chomwe chafotokozedwa kuti mutsegule zosungira. Vutoli limawonekeranso mukatsegula zolemba zakale mu fayilo ya fayilo ya Dolphin (Chotsani chinthu mumenyu), yomwe imagwiritsa ntchito ntchito ya Likasa kuti igwire ntchito ndi zosungira. Chiwopsezocho chikufanana ndi vuto lomwe ladziwika kalekale Zip Slip.

Kugwiritsa ntchito pachiwopsezo kumabwera ndikuwonjezera njira zosungira zomwe zili ndi zilembo za "../", ikakonzedwa, Ark imatha kupitilira chikwatu choyambira. Mwachitsanzo, pogwiritsa ntchito chiwopsezo chomwe mwatchula, mutha kulemba .bashrc script kapena kuyika zolembedwa mu ~/.config/autostart chikwatu kuti mukonzekere kukhazikitsidwa kwa khodi yanu ndi mwayi wa wogwiritsa ntchito pano. Macheke kuti apereke chenjezo pakakhala zovuta zakale adawonjezedwa pakutulutsidwa kwa Ark 20.08.0. Ikupezekanso kuti ikonzedwe chigamba.

Source: opennet.ru