Vagadziri veiyo LineageOS nharembozha (iyo yakatsiva CyanogenMod) ivo vakanyevera nezve kuzivikanwa yematanho akasiiwa kubva pamvumo isingabvumirwe pane yako zvivakwa. Izvo zvinoonekwa kuti nenguva dza6 mangwanani (MSK) musi waMay 3, iye anorwisa akakwanisa kuwana iyo server huru SaltStack yepakati pekugadziriswa manejimendi sisitimu nekushandisa iyo njodzi iyo isina kumbobatwa kusvika ikozvino.
Zvinongotaurwa kuti kurwiswa hakuna kukanganisa makiyi ekugadzira masiginecha edhijitari, iyo yekuvaka system uye sosi kodhi yepuratifomu. Makiyi akaiswa pamubati akaparadzaniswa zvachose nehukuru hwezvivakwa hwakachengetedzwa kuburikidza neSaltStack uye magungano akamiswa nezvikonzero zvehunyanzvi musi waApril 30.
Tichitarisa kubva kune iyo data pane iyo status.lineageos.org peji, ivo vanogadzira vakatodzorera sevha neGerrit's kodhi yekuongorora system, webhusaiti, uye wiki. Maseva ane anovaka (anovaka.lineageos.org), iyo kurodha portal emafaira (download.lineageos.org), mail maseva uye nehurongwa hwekubatanidza kuendesa mberi kumirazi vakaremara parizvino.
Nezve mutongo
Iyo yekuvandudza yakaburitswa muna Kubvumbi 29 kubva kuSaltStack 3000.2 chikuva uye mazuva mana gare gare (2 ya Chivabvu) hurema huviri hwakabviswa.
Dambudziko rinorara imomo, yekusagadzikana kwakataurwa, imwe yakaburitswa muna Kubvumbi 30 uye yakapihwa mwero wepamusoro wengozi (pano kukosha kwekutsikisa ruzivo mazuva akati wandei kana mavhiki mushure mekuwanikwa uye kuburitswa kwezvimedu kana kugadzirisa zvipembenene).
Sezvo iyo bhagi inobvumidza mushandisi asina kuvimbwa kuti aite kure kodhi kuitisa seanodzora Anogamuchira (munyu-tenzi) uye ese maseva akakwanisa kuburikidza nayo.
Kurwiswa kwacho kwakagoneswa nekuti netiweki chiteshi 4506 (kuwana SaltStack) haina kuvharirwa ne firewall yezvikumbiro zvekunze uye mune iyo murwi aifanira kumirira kuti aite pamberi pevagadziri veLineage SaltStack uye ekspluatarovat ichaedza kuisa yekugadzirisa kugadzirisa kutadza.
Vese vashandisi veSaltStack vanorayirwa kuti vakurumidze kugadzirisa masisitimu avo uye kutarisa zviratidzo zvekubira.
Sezviri pachena, kurwiswa kuburikidza neSaltStack kwanga kusiri kungogumira mukukanganisa LineageOS uye ikave yakapararira mukati mezuva, vashandisi vakati wandei vasina nguva yekugadzirisa SaltStack vakaona kuti zvivakwa zvavo zvakakanganiswa nemigodhi yekugamuchira kodhi kana madhoo ekumashure.
Anotaura zvakare kubiridzira kwakafanana pa zvemukati manejimendi sisitimu yezvivakwa Ghost, chiiIzvo zvakakanganisa nzvimbo dzeGhost (Pro) uye kubhadharisa (zvinofungidzirwa kuti manhamba emakadhi echikwereti haana kukanganiswa, asi password yekukurumidza kwevashandisi veMweya inogona kuwira mumaoko evanorwisa).
- Yekutanga kunetseka (CVE-2020-11651) zvinokonzerwa nekushaikwa kwemacheke akakodzera kana uchidana nzira dzekirasi yeClearFuncs mune munyu-tenzi maitiro. Iyo kushushikana inobvumira mushandisi ari kure kuti awane dzimwe nzira pasina chokwadi. Kunyanya, kuburikidza nenzira dzinonetsa, anorwisa anogona kuwana chiratidzo chekupinda mudzi kune tenzi server uye nekuita chero rairo kune vakashandira mauto anomhanya munyu-minion daemon. Chikwata chakaburitswa mazuva makumi maviri apfuura ayo anogadzirisa kusagadzikana uku, asi mushure mekushandisa kwayo kuoneka, pakave neshanduko dzekudzokera kumashure dzakakonzera kupunzika kwefaira nekukanganisa.
- Yechipiri kunetseka (CVE-2020-11652) inobvumidza, kuburikidza nekunyepedzera nekirasi yeClearFuncs, kuwana nzira kuburikidza nekuchinjiswa kwenzira dzakatsanangurwa neimwe nzira, iyo inogona kushandiswa pakuzara kuzere kune madhairekitori ehurongwa pane iyo FS ye master server ine rombo remidzi, asi zvinoda kuwanikwa kwechokwadi ( kuwana kwakadai kunogona kuwanikwa uchishandisa kusagadzikana kwekutanga uye kushandisa kwechipiri kushomeka kukanganisa zvachose zvivakwa).