ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ Ghostscript ื•ื•ืึธืก ืึทืœืึทื•ื– ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ืงืึธื“ ื•ื•ืขืŸ ืขืคืŸ ืึท ืคึผืึธืกื˜ืกืงืจื™ืคึผื˜ ื“ืึธืงื•ืžืขื ื˜

ืื™ืŸ Ghostscript, ืึท ืกื›ื•ื ืคื•ืŸ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืคึผืจืึทืกืขืกื™ื ื’, ืงืึทื ื•ื•ืขืจื˜ื™ื ื’ ืื•ืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ื™ื ื’ ื“ืึธืงื•ืžืขื ื˜ืŸ ืื™ืŸ PostScript ืื•ืŸ PDF ืคึฟืึธืจืžืึทื˜ื™ืจื•ื ื’ืขืŸ, ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2020-15900), ื•ื•ืึธืก ืงืขื ืขืŸ ืึธื ืžืึทื›ืŸ ื˜ืขืงืขืก ืฆื• ื–ื™ื™ืŸ ืžืึทื“ืึทืคื™ื™ื“ ืื•ืŸ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ืงืึทืžืึทื ื“ื– ืฆื• ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ื•ื•ืขืŸ ืขืคืŸ ืกืคึผืขืฆื™ืขืœ ื“ื™ื–ื™ื™ื ื“ ืคึผืึธืกื˜ืกืงืจื™ืคึผื˜ ื“ืึธืงื•ืžืขื ื˜ืŸ. ื ื™ืฆืŸ ืึท ื ื™ื˜-ื ืึธืจืžืึทืœ ืคึผืึธืกื˜ืกืงืจื™ืคึผื˜ ืึธืคึผืขืจืึทื˜ืึธืจ ืื™ืŸ ืึท ื“ืึธืงื•ืžืขื ื˜ rsearch ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืคืึทืจืฉืึทืคืŸ ืึท ืึธื•ื•ื•ืขืจืคืœืึธื• ืคื•ืŸ ื“ื™ uint32_t ื˜ื™ืคึผ ื•ื•ืขืŸ ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื ื’ ื“ื™ ื’ืจื™ื™ืก, ืึธื•ื•ื•ืขืจืจื™ื™ื˜ ื–ื™ืงืึธืจืŸ ื’ืขื‘ื™ื˜ืŸ ืึทืจื•ื™ืก ื“ื™ ืึทืœืึทืงื™ื™ื˜ื™ื“ ื‘ืึทืคืขืจ ืื•ืŸ ื‘ืึทืงื•ืžืขืŸ ืึทืงืกืขืก ืฆื• ื˜ืขืงืขืก ืื™ืŸ ื“ื™ FS, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืึท ื‘ืึทืคืึทืœืŸ ืฆื• ื•ื™ืกืคื™ืจืŸ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ืงืึธื“ ืื•ื™ืฃ ื“ื™ ืกื™ืกื˜ืขื (ืœืžืฉืœ, ื“ื•ืจืš ืึทื“ื™ื ื’ ืงืึทืžืึทื ื“ื– ืฆื• ~/.ื‘ืึทืฉืจืง ืึธื“ืขืจ ~/. ืคึผืจืึธืคื™ืœ).

ื“ื™ ืคึผืจืึธื‘ืœืขื ืึทืคืขืงืฅ ื™ืฉื•ื– ืคื•ืŸ 9.50 ืฆื• 9.52 (ื˜ืขื•ืช ืคืึธืจืฉื˜ืขืœืŸ ื–ื™ื ื˜ ืžืขืœื“ื•ื ื’ 9.28rc1, ืึธื‘ืขืจ, ืœื•ื™ื˜ ืฆื• ืœื•ื™ื˜ ืจื™ืกืขืจื˜ืฉืขืจื– ื•ื•ืึธืก ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืื™ื– ืืจื•ื™ืก ื–ื™ื ื˜ ื•ื•ืขืจืกื™ืข 9.50).

ืคืึทืจืจื™ื›ื˜ืŸ ืคืืจื’ืขืœื™ื™ื’ื˜ ืื™ืŸ ืžืขืœื“ื•ื ื’ 9.52.1 (patch). ื”ืึธื˜ืคื™ืงืก ืคึผืขืงืœ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืจืขืœืขืึทืกืขื“ ืคึฟืึทืจ ื“ืขื‘ื™ืึทืŸ, ื•ื‘ื•ื ื˜ื•, sususe. ืคึผืึทืงื™ื“ื–ืฉื™ื– ืื™ืŸ rhel ืคึผืจืึธื‘ืœืขืžืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ืึทืคืขืงื˜ืึทื“.

ืœืึธื–ืŸ ืื•ื ื“ื– ื“ืขืจืžืึธื ืขืŸ ืื™ืจ ืึทื– ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ Ghostscript ื–ืขื ืขืŸ ืึท ื’ืขื•ื•ืืงืกืŸ ื’ืขืคืึทืจ, ื•ื•ื™ื™ึทืœ ื“ืขื ืคึผืขืงืœ ืื™ื– ื’ืขื ื™ืฆื˜ ืื™ืŸ ืคื™ืœืข ืคืึธืœืงืก ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืคึฟืึทืจ ืคึผืจืึทืกืขืกื™ื ื’ ืคึผืึธืกื˜ืกืงืจื™ืคึผื˜ ืื•ืŸ ืคึผื“ืฃ ืคึฟืึธืจืžืึทื˜ื™ืจื•ื ื’ืขืŸ. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, Ghostscript ืื™ื– ื’ืขืจื•ืคืŸ ื‘ืขืฉืึทืก ื“ืขืกืงื˜ืึทืคึผ ื˜ืึทืžื ื™ื™ืœ ืฉืึทืคื•ื ื’, ื”ื™ื ื˜ืขืจื’ืจื•ื ื˜ ื“ืึทื˜ืŸ ื™ื ื“ืขืงืกื™ื ื’ ืื•ืŸ ื‘ื™ืœื“ ืงืึทื ื•ื•ืขืจื–ืฉืึทืŸ. ืคึฟืึทืจ ืึท ื’ืขืจืึธื˜ืŸ ื‘ืึทืคืึทืœืŸ, ืื™ืŸ ืคื™ืœืข ืงืึทืกืขืก ืขืก ืื™ื– ื’ืขื ื•ื’ ืฆื• ืคืฉื•ื˜ ืืจืืคืงืืคื™ืข ื“ื™ ื˜ืขืงืข ืžื™ื˜ ื“ื™ ื’ื•ื•ื•ืจืข ืึธื“ืขืจ ื‘ืœืขื˜ืขืจ ื“ื™ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืžื™ื˜ ืขืก ืื™ืŸ Nautilus. ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ Ghostscript ืงืขื ืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ื“ื•ืจืš ื‘ื™ืœื“ ืคึผืจืึทืกืขืกืขืจื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ImageMagick ืื•ืŸ GraphicsMagick ืคึผืึทืงืึทื“ื–ืฉืึทื– ื“ื•ืจืš ื’ืขื‘ืŸ ื–ื™ื™ ืึท JPEG ืึธื“ืขืจ PNG ื˜ืขืงืข ืžื™ื˜ ืคึผืึธืกื˜ืกืงืจื™ืคึผื˜ ืงืึธื“ ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ืึท ื‘ื™ืœื“ (ืึทื–ืึท ื˜ืขืงืข ื•ื•ืขื˜ ื–ื™ื™ืŸ ืคึผืจืึทืกืขืกื˜ ืื™ืŸ Ghostscript, ื–ื™ื ื˜ ื“ื™ MIME ื˜ื™ืคึผ ืื™ื– ืื ืขืจืงืขื ื˜ ื“ื•ืจืš ื“ื™ ืื™ื ื”ืึทืœื˜, ืื•ืŸ ืึธืŸ ืคืึทืจืœืึธื–ื  ืื•ื™ืฃ ืคืึทืจืœืขื ื’ืขืจื•ื ื’).

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’