ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืื™ื ื˜ืขืจื ืขื˜ ื ื™ื™ึทืขืก > Flatpak ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืฆื• ืคืึทืจืจื™ื›ื˜ืŸ ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–

Flatpak ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืฆื• ืคืึทืจืจื™ื›ื˜ืŸ ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–

ืงืขืจืขืงื˜ื™ื•ื• ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืฆื• ื“ื™ ื˜ืึธืึธืœืงื™ื˜ ื–ืขื ืขืŸ ื‘ืืจืขื›ื˜ื™ื’ื˜ ืฆื• ืฉืึทืคึฟืŸ ื–ื™ืš-ืงืึทื ื˜ื™ื™ื ื“ ืคืœืึทื˜ืคึผืึทืง ืคึผืึทืงืึทื“ื–ืฉืึทื– 1.14.4, 1.12.8, 1.10.8 ืื•ืŸ 1.15.4, ื•ื•ืึธืก ืคืึทืจืจื™ื›ื˜ืŸ ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–:

  • CVE-2023-28100 - ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ืึธื›ืžืึทื›ืŸ ืื•ืŸ ืคืึทืจื‘ื™ื™ึทื˜ืŸ ื˜ืขืงืกื˜ ืื™ืŸ ื“ื™ ื•ื•ื™ืจื˜ื•ืึทืœ ืงืึทื ืกืึธื•ืœ ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘ ื‘ืึทืคืขืจ ื“ื•ืจืš ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ TIOCLINUX ioctl ื•ื•ืขืŸ ืื™ืจ ื™ื ืกื˜ืึทืœื™ืจืŸ ืึท ืคืœืึทื˜ืคึผืึทืง ืคึผืขืงืœ ืฆื•ื’ืขื’ืจื™ื™ื˜ ื“ื•ืจืš ืึท ืึทื˜ืึทืงืขืจ. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืงืขืŸ ื–ื™ื™ืŸ ื’ืขื ื•ืฆื˜ ืฆื• ืงืึทื˜ืขืจ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ืงืึทืžืึทื ื“ื– ืื™ืŸ ื“ื™ ืงืึทื ืกืึธื•ืœ ื ืึธืš ื“ื™ ื™ื ืกื˜ืึทืœื™ืจื•ื ื’ ืคึผืจืึธืฆืขืก ืคื•ืŸ ืึท ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืคึผืขืงืœ ืื™ื– ื’ืขืขื ื“ื™ืงื˜. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื‘ืœื•ื™ื– ืื™ืŸ ื“ืขืจ ืงืœืึทืกื™ืฉ ื•ื•ื™ืจื˜ื•ืึทืœ ืงืึทื ืกืึธื•ืœ (/dev/tty1, /dev/tty2, ืืื–"ื• ื•) ืื•ืŸ ืงืขืŸ ื ื™ืฉื˜ ื•ื•ื™ืจืงืŸ ืกืขืฉืึทื ื– ืื™ืŸ Xterm, gnome-terminal, Console ืื•ืŸ ืื ื“ืขืจืข ื’ืจืึทืคื™ืงืึทืœ ื˜ืขืจืžื™ื ืึทืœืก. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื ื™ืฉื˜ ืกืคึผืขืฆื™ืคื™ืฉ ืคึฟืึทืจ ืคืœืึทื˜ืคึผืึทืง ืื•ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ื‘ืึทืคืึทืœืŸ ืื ื“ืขืจืข ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–, ืœืžืฉืœ, ืคืจื™ืขืจ ืขื ืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ืึธืก ืขืจืœื•ื™ื‘ื˜ ื›ืึทืจืึทืงื˜ืขืจ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ื“ื•ืจืš ื“ื™ TIOCSTI ioctl ืฆื•ื‘ื™ื ื“ ื–ืขื ืขืŸ ื’ืขืคึฟื•ื ืขืŸ ืื™ืŸ /bin/sandbox ืื•ืŸ ืงื ืึทืงืŸ.
  • CVE-2023-28101 - ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ื ื•ืฆืŸ ืึทื ื˜ืœื•ื™ืคืŸ ืกื™ืงื•ื•ืึทื ืกื™ื– ืื™ืŸ ืึท ืจืฉื™ืžื” ืคื•ืŸ ืคึผืขืจืžื™ืฉืึทื ื– ืื™ืŸ ืคึผืขืงืœ ืžืขื˜ืึทื“ืึทื˜ืึท ืฆื• ื‘ืึทื”ืึทืœื˜ืŸ ื•ื•ืึธืงื–ืึทืœ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื’ืขื‘ืขื˜ืŸ ืขืงืกื˜ืขื ื“ืขื“ ืคึผืขืจืžื™ืฉืึทื ื– ื‘ืขืฉืึทืก ื™ื ืกื˜ืึทืœื™ืจื•ื ื’ ืึธื“ืขืจ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืคื•ืŸ ืึท ืคึผืขืงืœ ื“ื•ืจืš ื“ื™ ื‘ืึทืคึฟืขืœืŸ ืฉื•ืจื” ืฆื•ื‘ื™ื ื“. ืึทื˜ืึทืงืขืจื– ืงืขืŸ ื ื•ืฆืŸ ื“ืขื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืฆื• ืคืึทืจืคื™ืจืŸ ื™ื•ื–ืขืจื– ื•ื•ืขื’ืŸ ื“ื™ ืงืจืึทื“ืขื ื˜ืฉืึทืœื– ื’ืขื ื™ืฆื˜ ืื™ืŸ ื“ืขื ืคึผืขืงืœ. GUIs ืคึฟืึทืจ ื™ื ืกื˜ืึธืœื™ื ื’ ืคืœืึทื˜ืคึผืึทืง ืคึผืึทืงืึทื“ื–ืฉืึทื–, ืึทื–ืึท ื•ื•ื™ GNOME ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืื•ืŸ KDE Plasma Discover, ื–ืขื ืขืŸ ื ื™ืฉื˜ ืึทืคืขืงื˜ืึทื“ ื“ื•ืจืš ื“ืขื ืึทืจื•ื™ืกื’ืขื‘ืŸ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’