Madivelopa a Mozilla atulutsa mitundu yatsopano ya asakatuli a Firefox 74.0.1 ndi Firefox ESR 68.6.1. Ogwiritsa ntchito amalangizidwa kuti asinthe asakatuli awo, popeza matembenuzidwe omwe amaperekedwa amakonza zovuta ziwiri zamasiku a zero zomwe zimagwiritsidwa ntchito ndi owononga.
Tikulankhula za zofooka za CVE-2020-6819 ndi CVE-2020-6820 zokhudzana ndi momwe Firefox imasamalirira malo ake okumbukira. Izi ndizomwe zimatchedwa kuti kugwiritsa ntchito-pambuyo paulere ndipo zimalola obera kuti aike khodi mosasamala mu Firefox kukumbukira kuti achite mogwirizana ndi osatsegula. Zowopsa zotere zitha kugwiritsidwa ntchito kupangira ma code pazida zozunzidwa.
Tsatanetsatane wa kuukira kwenikweni pogwiritsa ntchito zofooka zomwe zatchulidwa sizikuwululidwa, zomwe ndizochitika zofala pakati pa ogulitsa mapulogalamu ndi ofufuza zachitetezo chazidziwitso. Izi ndichifukwa choti onse nthawi zambiri amangoyang'ana pakuchotsa mwachangu mavuto omwe apezeka ndikupereka zokonza kwa ogwiritsa ntchito, ndipo pambuyo pake kufufuza mwatsatanetsatane za kuwukira kumachitika.
Malinga ndi zomwe zilipo, Mozilla idzafufuza zachiwopsezo pogwiritsa ntchito zovuta izi pamodzi ndi kampani ya chitetezo ya JMP Security ndi wofufuza Francisco Alonso, yemwe adapeza vutoli poyamba. Wofufuzayo akuwonetsa kuti zofooka zomwe zakhazikitsidwa muzosintha zaposachedwa za Firefox zitha kukhudza asakatuli ena, ngakhale palibe milandu yomwe imadziwika pomwe zolakwikazo zidagwiritsidwa ntchito ndi obera m'masakatuli osiyanasiyana.
Source: 3dnews.ru