Kusagadzikana kwemidzi mu pam-python

Mune zvakapihwa neprojekti pam-python PAM module, iyo inokutendera kuti ubatanidze ma module echokwadi muPython, kuzivikanwa vulnerability (CVE-2019-16729), kukupa iwe mukana wekuwedzera ropafadzo dzako muhurongwa. Paunenge uchishandisa iyo isina njodzi vhezheni ye pam-python (isina kuisirwa neyakagadzika), mushandisi wepano anogona kuwana midzi yekuwana nayo manipulation nemamiriro ezvinhu akasiyana-siyana anobatwa nePython nekukasira (semuenzaniso, unogona kukonzeresa kuchengetwa kwebytecode faira kuti unyore mafaera ehurongwa).

Kusagadzikana kuripo mukuburitswa kwazvino kwakagadzikana 1.0.6, yakapihwa kubva Nyamavhuvhu 2016. Dambudziko rakaonekwa panguva yekuongororwa kwepam-python PAM module yakaitwa nevagadziri kubva kuchikwata vhuraSUSE Security Team, uye yakatogadziriswa mukuvandudza 1.0.7. Unogona kuteedzera mamiriro ekuvandudza pam-python mapakeji pamapeji anotevera: Debian, Ubuntu, SUSE/openSUSE. MuFedora uye RHEL module kwete kupihwa.

Source: opennet.ru

Voeg