Ho e-na le Python 3.5.8, phetolelo e fosahetseng e ile ea ajoa ka phoso

Ka lebaka la phoso ha u hlophisa caching tsamaisong ea ho fana ka litaba, ha u leka ho khoasolla e 'ngoe ea likopano e hatisitsoeng letsatsi pele ho tokollo ya maobane python 3.5.8 ho jaleha Mohaho oa ponelopele o se nang litokiso tsohle. Bothata amme hodima polokelong feela Python-3.5.8.tar.xz, kopano Python-3.5.8.tgz ajoa ka nepo.

Basebelisi bohle ba kopitsitseng faele "Python-3.5.8.tar.xz" lihoreng tsa pele tsa 12 ka mor'a hore ba lokolloe ba eletsoa ho hlahloba ho nepahala ha data e jarollotsoeng ba sebelisa checksum (MD5 4464517ed6044bca4fc78ea9ed086c36). Ho fapana le tokollo ea ho qetela, mofuta oa ponelopele ha oa kenyelletsa khalemelo bofokodi CVE-2019-16935 ho khoutu ea seva ea XML-RPC. Ho ba kotsing ho lumelletse ente ea JavaScript (XSS) sebakeng sa server_title ka lebaka la khaello ea borakete ea ho baleha. Motho ea hlaselang a ka fumana sebaka sa JavaScript haeba sesebelisoa se beha lebitso la seva ho ipapisitsoe le tlhahiso ea mosebelisi (mohlala, "server.set_server_name('test ’)»).

Source: opennet.ru