Gyara yanayin rauni na Sudo a cikin duk sifofin Ubuntu masu goyan baya

Canonical a yau ta fitar da rahoton tsaro don sanar da masu amfani da tsarin aiki na Ubuntu cewa matsalar Sudo kwanan nan (lamba CVE-2017-1000367) a cikin dukkan sigar tallafi.

A cewar rahoton tsaron Saukewa: USN-3304-1 Daga Ubuntu, ya bayyana cewa wannan sabon yanayin tsaro ya shafi Ubuntu 17.04 (Zesty Zapus), Ubuntu 16.10 (Yakkety Yak), Ubuntu 16.04 LTS (Xenial Xerus) da dandamali na Ubuntu 14.04 LTS (Trusty Tahr), da ma dukkan dandamali. , ciki har da Kubuntu, Xubuntu, Lubuntu, Ubuntu GNOME, da dai sauransu.

An gano wannan yanayin rashin lafiyar ne a cikin bangaren Sudo, wata manhaja ce wacce take baiwa masu amfani damar gudanar da shirye-shirye tare da gatan wani mai amfani, kamar mai gudanarwa. Koyaya, Sudo ya kasance kuskuren nazarin abubuwan da ke ciki / proc / [pid] / stat, wanda maharin yanki zai iya amfani dashi don sake rubuta fayilolin azaman mai gudanar da tsarin.

“Sudo an gano cewa baya daidaita abubuwan da ke ciki / proc / [pid] / stat lokacin da yake kokarin tantance babban tty. Wani maharin gida zai iya amfani da wannan aibin don sake rubuta duk wani fayil a kan tsarin, ta hanyar keta izinin da suka dace, ”in ji mai ba da shawara kan harkokin tsaro.

Duk masu amfani dole ne su sabunta tsarin su kai tsaye

Sudo abu ne mai matukar mahimmanci na tsarin aiki na UNIX, don haka kowa ya sabunta dandamali da wuri-wuri zuwa sababbin sifofin sudo da Canonical ya samar a cikin rumbunan ajiyar kayan aikin Ubuntu.

Watau, dole ne ku sabunta kunshin sudo da kunshin sudo-ldap zuwa sigar 1.8.19p1-1ubuntu1.1 a Ubuntu 17.04, 1.8.16-0ubuntu3.2 a Ubuntu 16.10, 1.8.16-0ubuntu1.4 a ciki Ubuntu 16.04 LTS, an riga an sabunta 1.8.9p5-1ubuntu1.4 a cikin Ubuntu 14.04 LTS.

Kar ka manta sake kunna tsarin ku bayan girka sabon sudo na sudo, amma ku tabbatar da sabuntawa da wuri-wuri.


5 comments, bar naka

Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.

  1.   Su DeJesus ne m

    Wayyo!

  2.   Rodolfo m

    Ni mashahurin Linux ne da Ubuntu fara, ta yaya zan sabunta SUDO?
    TUNDA na riga na gode sosai saboda duk wanda ya amsa min.
    Rodolfo

    1.    Mai taimako Magnus m

      Ana sabunta tsarin kullum

    2.    Jorge m

      Dash / Dashboard (Windows key)> Sabunta software sannan sake kunnawa.

      Gaisuwa daga Perillo (Oleiros) - A Coruña

  3.   Alberto Saez m

    Na zo ne in tambayi duka abu ɗaya daga fewan kwanakin da suka gabata azaman ƙarin abu ɗaya wanda ban iya gani ba, Ina farawa da Linux, da ɗan ƙaramin karatu daga majallu, shafukan yanar gizo, ko ta yaya.

    1. Ta yaya zan sabunta shiri daya ko kunshin? Na fahimci hakan tare da
    $ sudo apt-get update && sudo apt-get upgrade an sabunta amma duk tsarin, yaya zan so in sabunta Firefox kawai? Ina tsammanin wannan shine yadda SUDO ke sabuntawa, dama?

    2. Yaya za a duba sigar kowane shiri ko kunshin kayan aiki? Sunce 1.8.16-0ubuntu1.4 akan Ubuntu 16.04 LTS amma kwata-kwata ban san wanene nawa ba.

    Mafi kyau