7 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ืคึผืœืึทื ืข ืื™ื ื”ืึทืœื˜ ืžืึทื ืึทื’ืขืžืขื ื˜ ืกื™ืกื˜ืขื

ืคึฟืึทืจ ืึท ืคืจื™ื™ ืื™ื ื”ืึทืœื˜ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืกื™ืกื˜ืขื ืคึผืœืึธื•ืŸ, ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ ืคึผื™ื˜ื”ืึธืŸ ื ื™ืฆืŸ ื“ื™ Zope ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืกืขืจื•ื•ืขืจ, ืืจื•ื™ืก ืคึผืึทื˜ืฉืึทื– ืžื™ื˜ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ 7 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– (CVE ื™ื“ืขื ื˜ื™ืคื™ืขืจืก ื”ืึธื‘ืŸ ื ื™ืฉื˜ ื ืึธืš ื’ืขื•ื•ืขืŸ ืึทืกื™ื™ื ื“). ื“ื™ ืคืจืื‘ืœืขืžืขืŸ ื•ื•ื™ืจืงืŸ ืึทืœืข ืงืจืึทื ื˜ ืจื™ืœื™ืกื™ื– ืคื•ืŸ Plone, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื“ื™ ืžืขืœื“ื•ื ื’ ืคืจื™ื™ ืึท ื‘ื™ืกืœ ื˜ืขื’ ืฆื•ืจื™ืง 5.2.1. ื“ื™ ื™ืฉื•ื– ื–ืขื ืขืŸ ืคึผืœืึทื ื ืขื“ ืฆื• ื–ื™ื™ืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ืฆื•ืงื•ื ืคึฟื˜ ืจื™ืœื™ืกื™ื– ืคื•ืŸ Plone 4.3.20, 5.1.7 ืื•ืŸ 5.2.2, ืื™ื™ื“ืขืจ ื“ื™ ื•ื™ืกื’ืึทื‘ืข ืคื•ืŸ โ€‹โ€‹ื•ื•ืึธืก ืขืก ืื™ื– ืกืึทื’ื“ื–ืฉืขืกื˜ื™ื“ ืฆื• ื ื•ืฆืŸ hotfix.

ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– (ืคืจื˜ื™ื ื ืึธืš ื ื™ืฉื˜ ื“ื™ืกืงืœืึธื•ื–ื“):

  • ื”ื™ื™ืš ืคื•ืŸ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ื“ื•ืจืš ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืจืขืกื˜ ืึทืคึผื™ (ื“ืขืจืฉื™ื™ื ื•ื ื’ ื‘ืœื•ื™ื– ื•ื•ืขืŸ plone.restapi ืื™ื– ืขื ื™ื™ื‘ืึทืœื“);
  • ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืคื•ืŸ ืกืงืœ ืงืึธื“ ืจืขื›ื˜ ืฆื• ื ื™ื˜ ื’ืขื ื•ื’ื™ืง ื™ืกืงื™ื™ืคึผื™ื ื’ ืคื•ืŸ ืกืงืœ ืงืึทื ืกื˜ืจืึทืงืฉืึทื ื– ืื™ืŸ DTML ืื•ืŸ ืึทื‘ื“ื–ืฉืขืงืฅ ืคึฟืึทืจ ืงืึทื ืขืงื˜ื™ื ื’ ืฆื• ื“ื™ DBMS (ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ืกืคึผืขืฆื™ืคื™ืฉ ืฆื• ื–ืึธืคึผ ืื•ืŸ ืื•ื™ืก ืื™ืŸ ืื ื“ืขืจืข ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืขืก);
  • ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืจื™ืจื™ื™ื˜ ืื™ื ื”ืึทืœื˜ ื“ื•ืจืš ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทื ื– ืžื™ื˜ ื“ื™ PUT ืื•ืคึฟืŸ ืึธืŸ ืฉืจื™ื™ื‘ืŸ ืจืขื›ื˜;
  • ืขืคืขื ืขืŸ ืจื™ื“ืขืจืขืงื˜ ืื™ืŸ ื“ื™ ืœืึธื’ื™ืŸ ืคืึธืจืขื;
  • ืžืขื’ืœืขื›ืงื™ื™ื˜ ืคื•ืŸ ื˜ืจืึทื ืกืžื™ื˜ื™ื ื’ ื‘ื™ื™ื–ืข ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ืขืŸ ื‘ื™ื™ืคึผืึทืกื™ื ื’ ื“ื™ ืื™ื–URLInPortal ื˜ืฉืขืง;
  • ืฉืคึผืจื™ื›ื•ื•ืึธืจื˜ ืฉื˜ืึทืจืงื™ื™ึทื˜ ื˜ืฉืขืง ืคื™ื™ืœื– ืื™ืŸ ืขื˜ืœืขื›ืข ืงืึทืกืขืก;
  • ืงืจื™ื™ึทื–-ืคึผืœืึทืฅ ืกืงืจื™ืคึผื˜ื™ื ื’ (ืงืกืกืก) ื“ื•ืจืš ืงืึธื“ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืื™ืŸ ื“ืขื ื˜ื™ื˜ืœ ืคืขืœื“.

ืžืงื•ืจ: opennet.ru