Ubuthathaka obubalulekileyo kwi-Exim evumela ukwenziwa kwekhowudi ekude njengengcambu

Exim abaphuhlisi beseva yemeyile kwaziswa abasebenzisi malunga nokuchonga ubuthathaka obubalulekileyo (I-CVE-2019-15846), ivumela umhlaseli wasekhaya okanye okude ukuba aphumeze ikhowudi yawo kumncedisi ngamalungelo engcambu. Akukho zinto zifumaneka esidlangalaleni zale ngxaki okwangoku, kodwa abaphandi abachonge ubuthathaka balungiselele iprototype yokuqala ye-exploit.

Ukukhutshwa okucwangcisiweyo kohlaziyo lwephakheji kunye nokupapashwa kokukhutshwa kolungiso kucwangciselwe i-6 Septemba (13:00 MSK) Exim 4.92.2. Kude kube ngoko, ulwazi oluneenkcukacha malunga nengxaki ayixhomekekanga ukuxela. Bonke abasebenzisi be-Exim kufuneka balungiselele ukufakela okungxamisekileyo kohlaziyo olungacwangciswanga.

Lo nyaka ngowesithathu gxeka ukuba sesichengeni kwi Exim. Ngokutsho kukaSeptemba ngokuzenzekelayo uvoto ngaphezu kwezigidi ezibini zeeseva zeposi, isabelo se-Exim yi-57.13% (kunyaka ophelileyo 56.99%), i-Postfix isetyenziswa kwi-34.7% (34.11%) yeeseva zeposi, i-Sendmail - 3.94% (4.24%), iMicrosoft Exchange - 0.53% (0.68%).

umthombo: opennet.ru

Yongeza izimvo