MuLibKSBA raibhurari, yakagadziridzwa neGnuPG purojekiti uye inopa mabasa ekushanda nezvitupa zveX.509, kusazvibata kwakadzama kwaonekwa (CVE-2022-3515), zvichiita kuti pave nekufashukira uye kunyora dhata risingawirirane kupfuura iyo yakagoverwa ASN.1 maumbirwo anoshandiswa muS/MIME, X.509 neCMS. Dambudziko rinowedzerwa nenyaya yekuti raibhurari yeLibksba inoshandiswa muGnuPG package uye kusazvibata kunogona kutungamira kune kure kure kodhi neanorwisa kana GnuPG (gpgsm) ichiita yakavharidzirwa kana kusainwa data kubva kumafaira kana email meseji uchishandisa S/MIME. Muchiitiko chakareruka, kurwisa munhu akabatwa uchishandisa email mutengi anotsigira GnuPG uye S/MIME, zvakakwana kutumira tsamba yakanyatsogadzirwa.
Kukuvadzwa uku kunogona kushandiswawo kurwisa maseva e dirmngr, ayo anodhawunirodha uye anoongorora runyorwa rwekubviswa kwezvitupa (CRLs) uye anosimbisa zvitupa zvinoshandiswa muTLS. Kurwiswa kwe dirmngr kunogona kuitwa ne maseva ewebhu, inodzorwa nemurwisi, nekuparadzira maCRL kana zvitupa zvakagadzirwa nehunyanzvi. Zvinocherechedzwa kuti hapana zviitwa zvepachena zveGPGSM neDirmngr zvakawanikwa, asi kushaya simba kwacho kwakajairika uye hapana chinotadzisa varwisi vane hunyanzvi kugadzira zviitwa zvavo.
Dambudziko iri rakagadziriswa pakuburitswa kweLibksba 1.6.2 uye muzvikamu zvebinary zveGnuPG 2.3.8. Linux Raibhurari yeLibksba inowanzo pihwa senzira yakasiyana yekuvimba, uye mukuvaka kwe Windows Yakavakirwa mupakeji huru yekuisa yeGnuPG. Mushure mekuvandudza, yeuka kutangazve maitiro ekumashure nemurairo wekuti "gpgconf --kill all." Kuti uone kana dambudziko riripo, unogona kutarisa kubuda kwemurairo wekuti "gpgconf --show-versions" nekutsvaga mutsetse wekuti "KSBA....", unofanirwa kuratidza vhezheni isiri pasi pe1.6.2.
Zvichangobva kuburitswa zvekugoverwa kwemabhuku hazvisati zvaburitswa, asi unogona kutevera kuoneka kwawo pamapeji anotevera: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD. Kusagadzikana uku kunokanganisawo mapakeji eMSI neAppImage ane GnuPG VS-Desktop neGpg4win.
Source: opennet.ru
