ืœืืงืืœืข ื•ื•ืึธืจืฆืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ืคึผืึทื-ืคึผื™ื˜ื”ืึธืŸ

ืื™ืŸ ื“ื™ ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ื™ ืคึผืจื•ื™ืขืงื˜ ืคึผืึทื-ืคึผื™ื˜ื”ืึธืŸ PAM ืžืึธื“ื•ืœืข, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืžืึทื“ื–ืฉื•ืœื– ืื™ืŸ ืคึผื™ื˜ื”ืึธืŸ, ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2019-16729), ื’ืขื‘ืŸ ืื™ืจ ื“ื™ ื’ืขืœืขื’ื ื”ื™ื™ื˜ ืฆื• ืคืึทืจื’ืจืขืกืขืจืŸ ื“ื™ื™ืŸ ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื. ื•ื•ืขืŸ ื ื™ืฆืŸ ืึท ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹pam-python (ื ื™ื˜ ืื™ื ืกื˜ืึทืœื™ืจืŸ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜), ืึท ื”ื™ื’ืข ื‘ืึทื ื™ืฆืขืจ ืงืขื ืขืŸ ื‘ืึทืงื•ืžืขืŸ ื•ื•ืึธืจืฆืœ ืึทืงืกืขืก ื“ื•ืจืš ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทื ื– ืžื™ื˜ ื™ื ื•ื•ื™ื™ืจืึทื ืžืขื ืึทืœ ื•ื•ืขืจื™ืึทื‘ืึทืœื– ื›ืึทื ื“ืึทืœื“ ื“ื•ืจืš Python ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ (ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืื™ืจ ืงืขื ืขืŸ ืฆื™ื ื’ืœ ืึท ืจืึทื˜ืขื•ื•ืขืŸ ืคื•ืŸ ืึท ื‘ื™ื˜ืขืงืึธื“ืข ื˜ืขืงืข ืฆื• ืึธื•ื•ื•ืขืจืจื™ื™ื˜ ืกื™ืกื˜ืขื ื˜ืขืงืขืก).

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืกื˜ืึทื‘ื™ืœ ืžืขืœื“ื•ื ื’ 1.0.6, ื’ืขืคึฟื™ื ื˜ ื–ื™ื ื˜ ืื•ื™ื’ื•ืกื˜ 2016. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื‘ืขืฉืึทืก ืึท ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืคื•ืŸ ื“ื™ ืคึผืึทื-ืคึผื™ื˜ื”ืึธืŸ PAM ืžืึธื“ื•ืœืข ื’ืขืคื™ืจื˜ ื“ื•ืจืš ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืคื•ืŸ ื“ื™ ืžืึทื ืฉืึทืคึฟื˜ openSUSE ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžืึทื ืฉืึทืคึฟื˜, ืื•ืŸ ืื™ื– ืฉื•ื™ืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ื™ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ 1.0.7. ืื™ืจ ืงืขื ืขืŸ ืฉืคึผื•ืจ ื“ื™ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืกื˜ืึทื˜ื•ืก ืคื•ืŸ pam-python ืคึผืึทืงืึทื“ื–ืฉืึทื– ืื•ื™ืฃ ื“ื™ ืคืืœื’ืขื ื“ืข ื‘ืœืขื˜ืขืจ: ื“ืขื‘ื™ืึทืŸ, ื•ื‘ื•ื ื˜ื•, SUSE/openSUSE. ืื™ืŸ ืคืขื“ืึธืจืึท ืื•ืŸ RHEL ืžืึธื“ื•ืœืข ื ื™ื˜ ืฆื•ื’ืขืฉื˜ืขืœื˜.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’