ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืื™ื ื˜ืขืจื ืขื˜ ื ื™ื™ึทืขืก > ืขืงืกื™ื 4.92.3 ืืจื•ื™ืก ืžื™ื˜ ื“ื™ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืขืจ ืคืขืจื˜ ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ืึท ื™ืึธืจ

ืขืงืกื™ื 4.92.3 ืืจื•ื™ืก ืžื™ื˜ ื“ื™ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืขืจ ืคืขืจื˜ ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ืึท ื™ืึธืจ

ืืจื•ื™ืก ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจ ืกืคึผืขืฆื™ืขืœ ืžืขืœื“ื•ื ื’ ืขืงืกืึทื 4.92.3 ืžื™ื˜ ื“ื™ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ืื ื“ืขืจืŸ ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2019-16928), ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ืึทืœืึทื•ื™ื ื’ ืื™ืจ ืฆื• ืจื™ืžืึธื•ื˜ืœื™ ื•ื™ืกืคื™ืจืŸ ื“ื™ื™ืŸ ืงืึธื“ ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ืขืจ ื“ื•ืจืš ืคืึธืจืŸ ืึท ืกืคึผืขืฉืœื™ ืคืึธืจืžืึทื˜ื˜ืขื“ ืฉื˜ืจื™ืงืœ ืื™ืŸ ื“ื™ EHLO ื‘ืึทืคึฟืขืœ. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืื™ืŸ ื“ืขืจ ื‘ื™ื ืข ื ืึธืš ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉืึทื– ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืง ืื•ืŸ ืื™ื– ืœื™ืžื™ื˜ืขื“ ืฆื• ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืžื™ื˜ ื“ื™ ืจืขื›ื˜ ืคื•ืŸ ืึท ืึทื ืคึผืจื™ื•ื•ื™ืœืึทื“ื–ืฉื“ ื‘ืึทื ื™ืฆืขืจ, ืื•ื ื˜ืขืจ ื•ื•ืึธืก ื“ื™ ื™ื ืงืึทืžื™ื ื’ ืึธื ื–ืึธื’ ื”ืึทื ื“ืœืขืจ ืื™ื– ืขืงืกืึทืงื™ื•ื˜ืึทื“.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื‘ืœื•ื™ื– ืื™ืŸ ื“ื™ ืขืงืกื™ื 4.92 ืฆื•ื•ื™ื™ึทื’ (4.92.0, 4.92.1 ืื•ืŸ 4.92.2) ืื•ืŸ ืื™ื– ื ื™ืฉื˜ ืึธื•ื•ื•ืขืจืœืึทืคึผ ืžื™ื˜ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ื™ ืึธื ื”ื™ื™ื‘ ืคื•ืŸ ื“ื™ ื—ื•ื“ืฉ CVE-2019-15846. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ื‘ืึทืคืขืจ ืœื•ื™ืคืŸ ืื™ืŸ ืึท ืคึฟื•ื ืงืฆื™ืข string_vformat(), ื“ื™ืคื™ื™ื ื“ ืื™ืŸ ื“ืขืจ ื˜ืขืงืข string.c. ื“ืขืžืึทื ืกื˜ืจื™ื™ื˜ื™ื“ ืขืงืกืคึผืœื•ื™ื˜ื™ืจืŸ ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืคืึทืจืฉืึทืคืŸ ืึท ืงืจืึทืš ื“ื•ืจืš ืคืึธืจืŸ ืึท ืœืึทื ื’ ืฉื˜ืจื™ืงืœ (ืขื˜ืœืขื›ืข ืงื™ืœืื‘ื™ื™ื˜ืŸ) ืื™ืŸ ื“ื™ EHLO ื‘ืึทืคึฟืขืœ, ืึธื‘ืขืจ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื“ื•ืจืš ืื ื“ืขืจืข ืงืึทืžืึทื ื“ื–, ืื•ืŸ ืงืขื ืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ื’ืขื ื•ืฆื˜ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’.

ืขืก ื–ืขื ืขืŸ ืงื™ื™ืŸ ื•ื•ืึธืจืงืึทืจืึธื•ื ื“ืก ืคึฟืึทืจ ื‘ืœืึทืงื™ื ื’ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืึทื–ื•ื™ ืึทืœืข ื™ื•ื–ืขืจื– ื–ืขื ืขืŸ ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ืขืจื“ื–ืฉืึทื ื˜ืœื™ ื™ื ืกื˜ืึทืœื™ืจืŸ ื“ื™ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ, ืฆื•ืœื™ื™ื’ืŸ patch ืึธื“ืขืจ ืžืึทื›ืŸ ื–ื™ื›ืขืจ ืฆื• ื ื•ืฆืŸ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– ื•ื•ืึธืก ืึทื ื˜ื”ืึทืœื˜ืŸ ืคื™ืงืกื™ื– ืคึฟืึทืจ ืงืจืึทื ื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ื ื”ืึธื˜ืคื™ืงืก ืื™ื– ืจืขืœืขืึทืกืขื“ ืคึฟืึทืจ ื•ื‘ื•ื ื˜ื• (ืึทืคืขืงืฅ ื‘ืœื•ื™ื– ืฆื•ื•ื™ื™ึทื’ 19.04), ืึทืจื˜ืฉ ืœื™ื ื•ืงืก, FreeBSD, ื“ืขื‘ื™ืึทืŸ (ื‘ืœื•ื™ื– ืึทืคืขืงืฅ ื“ืขื‘ื™ืึทืŸ 10 ื‘ื•ืกื˜ืขืจ) ืื•ืŸ ืคืขื“ืึธืจืึท. RHEL ืื•ืŸ CentOS ื–ืขื ืขืŸ ื ื™ืฉื˜ ืึทืคืขืงื˜ืึทื“ ื“ื•ืจืš ื“ืขื ืคึผืจืึธื‘ืœืขื, ื•ื•ื™ื™ึทืœ ืขืงืกื™ื ืื™ื– ื ื™ืฉื˜ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื–ื™ื™ืขืจ ื ืึธืจืžืึทืœ ืคึผืขืงืœ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ (ืื™ืŸ EPEL7 ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืคึฟืึทืจ ืื™ืฆื˜ ืงื™ื™ืŸ). ืื™ืŸ SUSE / openSUSE, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื ื™ืฉื˜ ื’ืขื•ื•ื™ื–ืŸ ืจืขื›ื˜ ืฆื• ื“ืขืจ ื ื•ืฆืŸ ืคื•ืŸ ื“ื™ ืขืงืกื™ื 4.88 ืฆื•ื•ื™ื™ึทื’.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’