Sudo inogadziriswazve, ino nguva yekudzivirira vabiridzi kubva mukuita mirairo semidzi

Maawa mashoma apfuura, Canonical yakaburitsa gwaro rekuchengetedza mairi rinotiudza nezve a kunetsekana mumutemo weSudo. Pakutanga, ini handina kunyatso kutarisisa nekuti yaive yakanzi yakaderera kukosha, asi pakupedzisira ndasarudza kunyora chinyorwa ichi nekuti ndiwo mumwe wemirairo yakanyanya kushandiswa muLinux-based distributions. Pamusoro pezvo, iko kukanganisa kwekuchengeteka kunogona kubvumira vabiridzi kuwana midzi yekuwana uye nekuita mirairo.

Zvirinani zvikwata zviviri kana mapurojekiti ataura kusagadzikana uku. Imwe ndeye Project Debian, yekutanga kuburitsa ruzivo Mugovera wekupedzisira, kutaura kuti iyo yakakanganiswa system ndeyeDebian 9 "Tambanudza". Kune rimwe divi, Canonical yakaburitsa mushumo USN-4263-1, kwaanotaura nezve imwechete nenjodzi iyo inobata zvese shanduro dzeUbuntu izvo zvichiri kutsigirwa mune yavo yakasikwa term, inova Ubuntu 19.10, Ubuntu 18.04 LTS, uye Ubuntu 16.04 LTS.

Minor Sudo inogadziridza yekuchengetedza

Ose maviri maProjekti Debian neCanonical anotiudza nezve imwecheteyo yekuchengetedza kukanganisa, a CVE-2019-18634 tsananguro yadzo inotsanangura «buffer inoputika muSudo apo pwfeedback inogoneswa«. Kana yakanyorwa se yakaderera kukosha imhaka yekuti bug harisi nyore kushandisa: "pwfeedback" inofanirwa kuve inogoneswa muSudoers nemutongi wehurongwa. Sekureva kweNational Vulnerability Database, «Kana pwfeedback inogoneswa mu / etc / sudoers, vashandisi vanogona kukonzeresa-yakavakirwa buffer kufashukira mune yakasarudzika sudo maitiro".

Semazuva ese, Canonical yakaburitsa gwaro rekuchengetedza kana yaburitsa zvigamba zvinogadzirisa iyo bug, saka kugadzirisa Sudo uye kuzvidzivirira kubva kwazviri zvakapusa sekuvhura Software Center (kana Software Gadziridza) nekuisa mapakeji matsva ayo anenge atotimirira. Zvinoenderana neCanonical, hazvizove zvakafanira kutangazve iyo inoshanda sisitimu kuitira kuti shanduko dziitwe.