Kwiiyure ezimbalwa ezidlulileyo sipapashe inqaku elithetha ngento eyaziwa ngokuba Ukutshixa, imodyuli entsha yokhuseleko eya kufika kunye neLinux 5.4. Phakathi kwento eya kwenziwa yile modyuli kukuba iya kunceda ukunqanda ukwenziwa kwekhowudi ngokungenamkhethe. Umzekelo ochaza kakuhle ukubaluleka kwawo ufike namhlanje, ukususela ICanonical ilungise ubuthathaka obuninzi kwaye ezinye zazo zingasetyenziselwa ukwenza ikhowudi engafanelekanga, into eya kuba nzima kakhulu emva kokukhululwa kweLinux 5.4.
Zizonke, zilungisiwe 6 ukuba semngciphekweni iqokelelwe kwiingxelo ezintathu: i I-USN-4142-1 echaphazela Ubuntu 19.04, Ubuntu 18.04 kunye no-Ubuntu 16.04, I-USN-4142-2 efana neyangaphambili kodwa igxile ku-Ubuntu 14.04 kunye no-Ubuntu 12.04 (zombini kwiinguqulelo ze-ESM) kunye ne-USN-4143-1, echaphazela iinguqulelo ezintathu ezisaxhamla inkxaso esemthethweni. Bonke ubuthathaka buphawulwe ngongxamiseko oluphakathi.
Ubuthathaka obuthandathu obuchaza ukuba kutheni sinomdla kwi-Lockdown
Ubuthathaka obulungisiweyo ibe koku kulandelayo:
- I-CVE-2019-5094: Ukusetyenziswa kwekhowudi esebenzisekayo kubuthathaka bukhona kusetyenziso lwefayile yekota ye-E2fsprogs 1.45.3. Isahlulo se-ext4 esenziwe ngokukodwa sinokubangela ukuba kubhalwe ngaphandle kwemida kwimfumba, kubangele ukuphunyezwa kwekhowudi. Umhlaseli inokonakalisa isahlulelo ukuvusa obu buthathaka.
- I-CVE-2017-2888: Ukuba semngciphekweni okuphuphumayo okupheleleyo kukho xa kuyilwa entsha Umphezulu we-RGB kwi-SDL 2.0.5. Ifayile eyenziwe ngokukodwa inokubangela inani elipheleleyo ukuphuphumala okukhokelela kwimemori encinci kakhulu eyabiweyo enokukhokelela ku ukuphuphuma kwebuffer kunye nokwenziwa kwekhowudi enokwenzeka. Umhlaseli unokubonelela nge Ifayile yomfanekiso eyenziwe ngokukodwa ukuvusa obu buthathaka.
- I-CVE-2019-7635, I-CVE-2019-7636, I-CVE-2019-7637 y I-CVE-2019-7638: I-SDL (i-Simple DirectMedia Layer) ukuya kuthi ga kwi-1.2.15 kunye ne-2.x ukuya ku-2.0.9 lUkuphuphuma kwebuffer ngokusekelwe kwiBlit1to4 kwividiyo/SDL_blit_1.c, SDL_GetRGB kwividiyo/SDL_pixels.c, SDL_FillRect kwividiyo/SDL_surface.c kunye neMap1toN kwividiyo/SDL_pixels.c.
Eyokuqala kwezi zingasentla ichaphazela Ubuntu 19.10 Eoan Ermine, ngoko ke baya kukhupha iipetshi zenguqulelo eza kukhutshwa nge-17 ka-Okthobha kungekudala. Nje ukuba uhlaziyo lufakwe, kufuneka uqale kabusha ikhompyuter yakho ukuze utshintsho lusebenze. Kwaye nangona zingezizo iimpazamo ezinzulu, Ukutshixa, Siza kulinda wena.