Chiwopsezo mu SQLite DBMS

MU SQLite DBMS kudziwika kusatetezeka (CVE-2019-5018), yomwe imakupatsani mwayi wogwiritsa ntchito nambala yanu pamakina ngati kuli kotheka kuyankha funso la SQL lokonzedwa ndi wowukira. Vutoli limayamba chifukwa cha zolakwika pakukhazikitsa ntchito zazenera ndipo zikuwoneka kuyambira kunthambi SQLite 3.26. Kusatetezeka kuthetsedwa m’magazini a April SQLite 3.28 osatchulapo za kukonza zovuta zachitetezo.

Funso lopangidwa mwapadera la SQL SELECT litha kupangitsa kuti pakhale mwayi wogwiritsa ntchito kukumbukira, womwe ungagwiritsidwe ntchito kupanga mwayi wogwiritsa ntchito code pogwiritsira ntchito SQLite. Chiwopsezocho chingagwiritsidwe ntchito ngati pulogalamuyo ilola zomanga za SQL zochokera kunja kuti ziperekedwe ku SQLite.

Mwachitsanzo, chiwonongeko chikhoza kuchitika pa msakatuli wa Chrome ndi mapulogalamu ogwiritsira ntchito injini ya Chromium, popeza WebSQL API ikugwiritsidwa ntchito pamwamba pa SQLite ndikupeza DBMS iyi kuti ifufuze mafunso a SQL kuchokera pa intaneti. Kuti muwukire, ndikokwanira kupanga tsamba lomwe lili ndi code yoyipa ya JavaScript ndikukakamiza wogwiritsa ntchito kuti atsegule pasakatuli potengera injini ya Chromium.

Source: opennet.ru