Chiwopsezo mu woyang'anira phukusi la GNU Guix

Mu phukusi woyang'anira GNU Guide kudziwika kusatetezeka (CVE-2019-18192), yomwe imalola kuti code ichitidwe malinga ndi wogwiritsa ntchito wina. Vutoli limapezeka pamasinthidwe a ogwiritsa ntchito ambiri a Guix ndipo amayamba chifukwa chokhazikitsa molakwika ufulu wofikira pamndandanda wamakina omwe ali ndi mbiri ya ogwiritsa ntchito.

Mwachikhazikitso, ~/.guix-profile user profiles amatanthauzidwa ngati maulalo ophiphiritsira ku /var/guix/profiles/per-user/$USER. Vuto ndiloti zilolezo pa /var/guix/profiles/per-user/ directory zimalola aliyense wogwiritsa ntchito kupanga ma subdirectories atsopano. Wowukira atha kupanga chikwatu cha wogwiritsa ntchito wina yemwe sanalowemo ndikukonzekera kuti code yake iyendetse (/ var/guix/profiles/per-user/$USER alipo mu PATH variable, ndipo wowukirayo atha kuyika mafayilo omwe angathe kuchitika. mu bukhu ili lomwe lidzachitidwa pamene wozunzidwayo akugwira ntchito m'malo mwa mafayilo omwe angathe kuchitidwa).

Source: opennet.ru

Kuwonjezera ndemanga