Fedora 37 ayaa dib u dhigtay laba toddobaad sababtoo ah baylahnimada OpenSSL ee muhiimka ah

Horumarinta mashruuca Fedora ayaa ku dhawaaqay dib u dhigista sii deynta Fedora 37 ilaa Noofambar 15 sababtoo ah baahida loo qabo baabi'inta nuglaanshaha halista ah ee maktabadda OpenSSL. Maadaama xogta ku saabsan nuxurka nuglaanta la shaacin doono kaliya Noofambar 1 mana cadda inta ay qaadanayso hirgelinta ilaalinta qaybinta, waxaa la go'aamiyay in dib loo dhigo sii deynta 2 toddobaad. Tani maaha markii ugu horeysay ee taariikhda siideynta Fedora 37 la filayo Oktoobar 18, laakiin waxaa dib loo dhigay laba jeer (ilaa Oktoobar 25 iyo Noofembar 1) sababtoo ah ku guuldareysiga buuxinta shuruudaha tayada.

Hadda, 3 arrimood ayaan weli go'in dhismayaashii imtixaanka u dambeeyay waxaana loo kala saaray inay xannibayaan sii-deynta. Marka lagu daro baahida loo qabo hagaajinta nuglaanta ee openssl, maareeyaha kwin composite ayaa soo laalaada marka la bilaabayo fadhiga KDE Plasma ee ku salaysan Wayland marka qaabka loo dejiyo nomodeset (garaafyada aasaasiga ah) ee UEFI, iyo codsiga gnome-calendar wuxuu qaboojiyaa marka la hagaajinayo soo noqnoqda. dhacdooyinka.

Nuglaanta halista ah ee OpenSSL waxay saamaysaa laanta 3.0.x kaliya; 1.1.1x sii dayntu ma saamayso. Laanta OpenSSL 3.0 ayaa horay loogu isticmaalay qaybinta sida Ubuntu 22.04, CentOS Stream 9, RHEL 9, OpenMandriva 4.2, Gentoo, Fedora 36, ​​Debian Testing/ Unstable. Gudaha SUSE Linux Enterprise 15 SP4 iyo OpenSUSE Leap 15.4, xirmooyinka leh OpenSSL 3.0 ayaa la heli karaa si ikhtiyaari ah, xirmooyinka nidaamku waxay isticmaalaan laanta 1.1.1. Debian 1, Arch Linux, Void Linux, Ubuntu 11, Slackware, ALT Linux, RHEL 20.04, OpenWrt, Alpine Linux 8 waxay ku sii jiraan laamaha OpenSSL 3.16.x.

Nuglaanta waxaa lagu sifeeyay mid halis ah; tafaasiisha weli lama bixin, laakiin marka la eego darnaanta dhibaatadu waxay ku dhowdahay nuglaanshaha dareenka Wadnaha. Heer halis ah oo halis ah ayaa tusinaysa suurtagalnimada weerar fog oo lagu sameeyo habaynta caadiga ah. Dhibaatooyinka horseeda daadinta fog ee macluumaadka xusuusta server-ka, fulinta koodka weerarka, ama tanaasulka furayaasha gaarka ah ee server-ka ayaa loo kala saari karaa inay yihiin kuwo muhiim ah. Xirmada OpenSSL 3.0.7 ee hagaajinaysa dhibaatada iyo macluumaadka ku saabsan nooca baylahda ayaa la daabici doonaa Noofambar 1.

Source: opennet.ru