ื“ืจื™ื™ ื‘ืึทื’ื– ื•ื•ืึธืก ืคื™ืจืŸ ืฆื• ื™ื‘ืขืจื™ืง ื–ื›ึผืจื•ืŸ ืงืึทื ืกืึทืžืฉืึทืŸ ื–ืขื ืขืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ nginx

ื“ืจื™ื™ ื™ืฉื•ื– ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ nginx ื•ื•ืขื‘ ืกืขืจื•ื•ืขืจ (CVE-2019-9511, CVE-2019-9513, CVE-2019-9516) ื•ื•ืึธืก ื’ืขืคึฟื™ืจื˜ ืฆื• ื™ื‘ืขืจื™ืง ื–ื›ึผืจื•ืŸ ืงืึทื ืกืึทืžืฉืึทืŸ ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ ื“ื™ ืžืึธื“ื•ืœืข ngx_http_v2_module ืื•ืŸ ื™ืžืคึผืœืึทืžืขื ืึทื“ ืคึฟื•ืŸ ื“ื™ ื”ื˜ื˜ืคึผ / 2 ืคึผืจืึธื˜ืึธืงืึธืœ. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืึทืคืขืงืฅ ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ 1.9.5 ืฆื• 1.17.2. ืคื™ืงืกื™ื– ื–ืขื ืขืŸ ื’ืขืžืื›ื˜ ืฆื• nginx 1.16.1 (ืกื˜ืึทื‘ื™ืœ ืฆื•ื•ื™ื™ึทื’) ืื•ืŸ 1.17.3 (ืžื™ื™ื ืกื˜ืจื™ื). ื“ื™ ืคืจืื‘ืœืขืžืขืŸ ื–ืขื ืขืŸ ื“ื™ืกืงืึทื•ื•ืขืจื“ ื“ื•ืจืš Jonathan Looney ืคื•ืŸ Netflix.

ืžืขืœื“ื•ื ื’ 1.17.3 ื›ื•ืœืœ ืฆื•ื•ื™ื™ ืžืขืจ ืคื™ืงืกื™ื–:

  • ืคืึทืจืจื™ื›ื˜ืŸ: ื•ื•ืขืŸ ื ื™ืฆืŸ ืงืึทืžืคึผืจืขืฉืึทืŸ, "ื ื•ืœ ื’ืจื™ื™ืก ื‘ื•ืฃ" ืึทืจื˜ื™ืงืœืขืŸ ืงืขืŸ ื“ืขืจืฉื™ื™ึทื ืขืŸ ืื™ืŸ ื“ื™ ืœืึธื’ืก; ื“ืขืจ ื–ืฉื•ืง ืื™ื– ืืจื•ื™ืก ืื™ืŸ 1.17.2.
  • ืคืึทืจืจื™ื›ื˜ืŸ: ื ืกืขื’ืžืขื ื˜ืึทื˜ื™ืึธืŸ ืฉื•ืœื“ ืงืขืŸ ืคึผืึทืกื™ืจืŸ ืื™ืŸ ืึท ืึทืจื‘ืขื˜ืขืจ ืคึผืจืึธืฆืขืก ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ ื“ื™ ืจืขืกืึธืœื•ื•ืขืจ ื“ื™ืจืขืงื˜ื™ื•ื• ืื™ืŸ ืึท SMTP ืคืจืืงืกื™.

ืžืงื•ืจ: linux.org.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’