Exim 4.92.1 gadziriso ine njodzi kugadzirisa

rakabudiswa kusunungurwa kusina kurongwa kwemail server Exim 4.92.1 iyo inobvisa njodzi yakaoma (CVE-2019-13917), iyo inobvumira kureba kodhi kuuraya ine kodzero dzemidzi kana mamwe marongero aripo mukugadzirisa.

Kunetseka anooneka kutanga kubva pakusunungurwa 4.85 paunenge uchishandisa "${sort }" mushandisi muzvirongwa, kana zvinhu zvinoshandiswa mu "sort" list zvinogona kuendeswa kune vanorwisa (somuenzaniso, kuburikidza ne $ local_part uye $ domain variables). Nekutadza, mushandisi uyu haashandiswe mukumisikidzwa kunopihwa mubhesi Exim kugovera uye mupakeji yeDebian neUbuntu (pamwe zvakare mune kumwe kugoverwa). Kuti utarise system yako yekusagadzikana, unogona kumhanya murairo "exim -bP config | grep rudzi".

Zvigadziriso zvekugadzirisa kusagadzikana zvakatoburitswa Debian ΠΈ Ubuntu. Zvigadziriso hazvisati zvagadzirirwa suse, Fedora, FreeBSD ΠΈ Arch Linux. RHEL uye CentOS dambudziko kwete kubatwa, sezvo Exim isingabatanidzwe mune yavo yenguva pasuru repository (kana zvichidikanwa, yakaiswa kubva kune repository epel).

Source: opennet.ru

Voeg