ืึทื ืฉื˜ืึธื˜ Python 3.5.8, ืึท ืคืึทืœืฉ ื•ื•ืขืจืกื™ืข ืื™ื– ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ื“ื•ืจืš ื’ืจื™ื™ึทื–

ืจืขื›ื˜ ืฆื• ืึท ื˜ืขื•ืช ื•ื•ืขืŸ ืึธืจื’ืึทื ื™ื™ื–ื™ื ื’ ืงืึทื˜ืฉื™ื ื’ ืื™ืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืขืงืกืคึผืจืขืก ืกื™ืกื˜ืขื, ื•ื•ืขืŸ ืื™ืจ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ืึธืคึผืœืึธื“ื™ืจืŸ ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ืึทืกืขืžื‘ืœื™ื– ืืจื•ื™ืก ื“ืขืจ ื˜ืึธื’ ืื™ื™ื“ืขืจ ื ืขื›ื˜ืŸ ืงืขืจืขืงื˜ื™ื•ื• ืžืขืœื“ื•ื ื’ ืคึผื™ื˜ื”ืึธืŸ ืงืกื ื•ืžืงืก ืฆืขืฉืคืจื™ื™ื˜ืŸ ื ืคืึธืจื•ื™ืกื™ืงืข ื•ื•ื™ื™ึทื–ื•ื ื’ ื‘ื•ื™ืขืŸ ื•ื•ืึธืก ื˜ื•ื˜ ื ื™ืฉื˜ ืึทื ื˜ื”ืึทืœื˜ืŸ ืึทืœืข ื“ื™ ืคื™ืงืกื™ื–. ืคึผืจืึธื‘ืœืขื ื’ืขืจื™ืจื˜ ื‘ืœื•ื™ื– ืึทืจื›ื™ื•ื• Python-3.5.8.tar.xz, ืคึฟืึทืจื–ืึทืžืœื•ื ื’ Python-3.5.8.tgz ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ืจื™ื›ื˜ื™ืง.

ื›ืœ ื™ื•ื–ืขืจื– ื•ื•ืึธืก ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ื“ื™ ื˜ืขืงืข "Python-3.5.8.tar.xz" ืื™ืŸ ื“ืขืจ ืขืจืฉื˜ืขืจ 12 ืฉืขื” ื ืึธืš ื“ื™ ืžืขืœื“ื•ื ื’ ื–ืขื ืขืŸ ืึทื“ื•ื•ื™ื™ื–ื“ ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืจื™ื›ื˜ื™ืง ืคื•ืŸ ื“ื™ ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ื“ืึทื˜ืŸ ืžื™ื˜ ื“ื™ ื˜ืฉืขืงืงืกื•ื (MD5 4464517ed6044bca4fc78ea9ed086c36). ื ื™ื˜ ืขื ืœืขืš ื“ื™ ืœืขืฆื˜ ืžืขืœื“ื•ื ื’, ื“ื™ ืคืึธืจื•ื™ืกื™ืงืข ื•ื•ื™ื™ึทื–ื•ื ื’ ื•ื•ืขืจืกื™ืข ืื™ื– ื ื™ืฉื˜ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืงืขืจืขืงืฉืึทืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– CVE-2019-16935 ืื™ืŸ ื“ื™ XML-RPC ืกืขืจื•ื•ืขืจ ืงืึธื“. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืขืจืœื•ื™ื‘ื˜ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ื™ื ื“ื–ืฉืขืงืฉืึทืŸ (ืงืกืกืก) ื“ื•ืจืš ื“ื™ ืกืขืจื•ื•ืขืจ_ื˜ื™ื˜ืœ ืคืขืœื“ ืจืขื›ื˜ ืฆื• ื“ืขืจ ืคืขืœืŸ ืคื•ืŸ ื•ื•ื™ื ืงืœ ืงืึทื ื˜ื™ืงืขืจ ื™ืกืงื™ื™ืคึผื™ื ื’. ืึท ืึทื˜ืึทืงืขืจ ืงืขืŸ ื“ืขืจื’ืจื™ื™ื›ืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืื•ื™ื‘ ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืฉื˜ืขืœื˜ ื“ื™ ืกืขืจื•ื•ืขืจ ื ืึธืžืขืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื‘ืึทื ื™ืฆืขืจ ืึทืจื™ื™ึทื ืฉืจื™ื™ึทื‘ (ืœืžืฉืœ, "server.set_server_name('test) โ€™)ยป).

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’