Kuburitswa kwePacman 5.2 package maneja

Inowanikwa package maneja kuburitswa Pacman 5.2, inoshandiswa mukugoverwa kweArch Linux. Kubva shanduko zvinogona kusiyaniswa:

• Tsigiro yezvigadziriso zvedelta yakabviswa zvachose, zvichingobvumira shanduko chete kudhaunirodwa. Chimiro chabviswa nekuda kwekusagadzikana kuri kuzivikanwa (CVE-2019-18183), izvo zvinokutendera kuti umhanye mirairo isingaite muhurongwa kana uchishandisa database isina kusaina. Pakurwiswa, zvinodikanwa kuti mushandisi atore mafaera akagadzirirwa neanorwisa ane dhatabhesi uye delta update. Tsigiro yezvigadziriso zvedelta yakadzimwa nekusarudzika uye haina kushandiswa zvakanyanya. Mune ramangwana, zvakarongwa kunyora zvachose kushandiswa kwe delta updates;
• Kusagadzikana kwakagadziriswa muXferCommand command handle (CVE-2019-18182), kubvumira, muchiitiko chekurwiswa kweMITM uye dhatabhesi isina kunyoreswa, kuti iwane kuitwa kwemirairo yayo muhurongwa;
• Makepkg yakawedzera kugona kubatanidza zvibatiso zvekurodha masosi mapakeji uye kutarisa nedhijitari siginecha. Yakawedzera rutsigiro rwekumanikidza kwepaketi uchishandisa lzip, lz4 uye zstd algorithms. Yakawedzera tsigiro yekumanikidza dhatabhesi uchishandisa zstd kuti repo-kuwedzera. Kuuya munguva pfupi kuArch Linux inotarisirwa kuti kushandura kushandisa zstd nekukasira, iyo, kana ichienzaniswa ne "xz" algorithm, ichamhanyisa mashandiro ekumanikidza uye decompressing mapaketi, uchichengetedza danho rekumanikidza;
• Zvinogoneka kuungana uchishandisa Meson system pachinzvimbo cheAutotools. Mukuburitswa kunotevera, Meson achatsiva zvachose Autotools;
• Yakawedzera rutsigiro rwekurodha PGP makiyi uchishandisa iyo Webhu Key Directory (WKD), musimboti wekuisa makiyi eruzhinji padandemutande rine chinongedzo kudomasi yakataurwa mukero yeposvo. Semuenzaniso, kune kero "[email inodzivirirwa]"Kiyi inogona kudhaunirodwa kuburikidza neiyi link" https://example.com/.well-known/openpgpkey/hu/183d7d5ab73cfc5ece9a5f94e6039d5a ". Kurodha makiyi kuburikidza neWKD kunogoneswa nekusarudzika mu pacman, pacman-kiyi uye makepkg;
• Iro "--force" sarudzo yakabviswa, panzvimbo iyo "--overwrite" sarudzo, iyo inonyatsoratidza hukuru hwekushanda, yakarongwa kupfuura gore rapfuura;
• Faira yekutsvaga mhinduro uchishandisa iyo -F sarudzo inopa ruzivo rwakawedzerwa senge boka repasuru uye chimiro chekuisa.

Source: opennet.ru