Abathuthukisi bephrojekthi ye-Fedora bamemezele ukuhlehliswa kokukhishwa kwe-Fedora 37 kuya kuNovemba 15 ngenxa yesidingo sokuqeda ubungozi obubalulekile kumtapo wezincwadi we-OpenSSL. Njengoba idatha emayelana nengqikithi yokuba sengozini izodalulwa kuphela ngoNovemba 1 futhi akucaci ukuthi kuzothatha isikhathi esingakanani ukuvikela ekusatshalalisweni, kunqunywe ukuthi kuhlehliswe ukukhishwa ngamaviki angu-2. Lesi akusona isikhathi sokuqala usuku lokukhishwa kwe-Fedora 37 bekulindeleke ngo-Okthoba 18, kodwa luhlehliswe kabili (kuya ku-Okthoba 25 noNovemba 1) ngenxa yokwehluleka ukuhlangabezana nezidingo zekhwalithi.
Okwamanje, izinkinga ezi-3 zihlala zingalungisiwe ekwakhiweni kokuhlolwa kokugcina futhi zihlukaniswa njengokuvimba ukukhishwa. Ngokungeziwe esidingweni sokulungisa ubungozi ku-openssl, umphathi we-kwin oyinhlanganisela uyalenga uma eqala iseshini ye-KDE Plasma ese-Wayland lapho imodi isethelwe ku-nomodeset (izithombe eziyisisekelo) ku-UEFI, futhi uhlelo lokusebenza lwekhalenda ye-gnome luba yiqhwa lapho ukuhlelwa kuphindaphinda. imicimbi.
Ukuba sengozini okubalulekile ku-OpenSSL kuthinta kuphela igatsha le-3.0.x; ukukhishwa okungu-1.1.1x akuthinteki. Igatsha le-OpenSSL 3.0 selivele lisetshenziswa ekusabalaliseni okufana no-Ubuntu 22.04, CentOS Stream 9, RHEL 9, OpenMandriva 4.2, Gentoo, Fedora 36, ββββDebian Testing/Unstable. Ku-SUSE Linux Enterprise 15 SP4 kanye ne-openSUSE Leap 15.4, amaphakheji ane-OpenSSL 3.0 ayatholakala ngokuzikhethela, amaphakheji esistimu asebenzisa igatsha le-1.1.1. I-Debian 1, Arch Linux, Void Linux, Ubuntu 11, Slackware, ALT Linux, RHEL 20.04, OpenWrt, Alpine Linux 8 ihlala isemagatsheni e-OpenSSL 3.16.x.
Ukuba sengozini kubhekwa njengokubalulekile; imininingwane ayikanikezwa, kodwa ngokobukhulu inkinga iseduze nokuba sengozini kwe-Heartbleed. Izinga elibucayi lengozi lisikisela ukuthi kungenzeka ukuhlasela okukude ekucushweni okujwayelekile. Izinkinga eziholela ekuvuzeni okukude kokuqukethwe kwememori yeseva, ukwenziwa kwekhodi yomhlaseli, noma ukonakala kokhiye abayimfihlo beseva kungachazwa njengokubalulekile. Isiqeshana se-OpenSSL 3.0.7 esilungisa inkinga nolwazi olumayelana nemvelo yokuba sengozini sizoshicilelwa ngomhla ka-1 Novemba.
Source: opennet.ru