Abaphuhlisi beqonga leLos LineOS (leyo ithathe indawo yeCyanogenMod) balumkisa malunga nokuchongwa yomkhondo oshiyekileyo kufikelelo olungagunyaziswanga kwiziseko zakho. Kuyaqatshelwa ukuba ngentsimbi yesi-6 kusasa (MSK) ngoMeyi 3, umhlaseli ukwazile ukufikelela kwiserver ephambili Inkqubo yolawulo loqwalaselo esembindini yeSaltStack ngokuxhaphaza ukuba sesichengeni okungafakwanga iipateni ukuza kuthi ga ngoku.
Kuxelwa kuphela ukuba uhlaselo aluchaphazelekanga izitshixo zokuvelisa iisiginitsha zedijithali, Inkqubo yokwakha kunye nekhowudi yemvelaphi yeqonga. Izitshixo zabekwa kumamkeli ohluke ngokupheleleyo kwiziseko zophuhliso ezilawulwa ngeSaltStack kwaye iindibano zamiswa ngenxa yezizathu zobuchwephesha ngo-Epreli 30.
Ukujonga idatha ekwiphepha le status.lineageos.org, abaphuhlisi sele beyibuyisile iseva ngenkqubo yokujonga ikhowudi kaGerrit, iwebhusayithi kunye newiki. Iiseva ezinokwakha (yakha.lineageos.org), the khuphela i-portal yeefayile (ukhuphelo.lineageos.org), iiseva zeposi kunye nenkqubo yokulungelelanisa ukuhanjiswa kwizipili bakhubazekile okwangoku.
Malunga nesigwebo
Uhlaziyo lwakhutshwa ngo-Epreli 29 ukusuka kwiqonga leSaltStack 3000.2 kwaye kwiintsuku ezine kamva (2 kaMeyi) Ubuthathaka babini basuswa.
Ingxaki ilele apho, ubungozi obuchaziweyo, enye yapapashwa ngo-Epreli 30 kwaye yabelwa elona nqanaba liphezulu lomngcipheko (apha ukubaluleka kokupapasha ulwazi iintsuku ezininzi okanye iiveki emva kokufunyanwa kunye nokukhululwa kwamabala amancinci okanye ukulungiswa kwe-bug).
Kuba i-bug ivumela umsebenzisi ongagunyaziswanga ukuba enze ikhowudi ekude njengomphathi olawulayo (inkosi yetyuwa) kunye nazo zonke iiseva ezilawulwa ngayo.
Olu hlaselo lwenzeka ngenxa yokuba izibuko lenethiwekhi i-4506 (ukufikelela kwi-SaltStack) ayivalwanga yi-firewall yezicelo zangaphandle nalapho umhlaseli kuye kwafuneka alinde phambi kokuba abaphuhlisi be-Lineage SaltStack kunye ne-ekspluatarovat bazame ukufaka uhlaziyo ukulungisa ukusilela.
Bonke abasebenzisi beSaltStack bayacetyiswa ukuba bahlaziye ngokungxamisekileyo iinkqubo zabo kwaye bajonge iimpawu zokukhangela.
Ngokucacileyo, uhlaselo olwenziwe ngeSaltStack lwalungaphelelanga ekuchaphazeleni i-LineageOS Kwaye yanda emini, abasebenzisi abaliqela ababengenalo ixesha lokuhlaziya i-SaltStack baqaphela ukuba iziseko zophuhliso zabo zonakaliswe yimigodi yokubamba imigodi okanye iingcango zangasemva.
Ukwachaza nokuqhekeka okufanayo kwi iziseko zenkqubo yolawulo lomxholo Isiporho, yintoniIchaphazele indawo ye-Ghost (Pro) kunye nokuhlawulisa (iinombolo zekhadi letyala ekuthiwa azichaphazeleki, kodwa i-password yabasebenzisi be-Ghost hashes ingawela ezandleni zabahlaseli).
- Ubungozi bokuqala (i-CVE-2020-11651) Kubangelwa kukusilela kokutshekishwa ngokufanelekileyo xa ubiza iindlela zeklasi ye-ClearFuncs kwinkqubo yetyuwa. Ukuba semngciphekweni kuvumela umsebenzisi okude ukuba afikelele kwiindlela ezithile ngaphandle kokungqinisisa. Ngokukodwa, ngokusebenzisa iindlela ezinengxaki, umhlaseli unokufumana ithokheni yokungena kweengcambu kwi-master server kwaye enze nawuphi na umyalelo kwimikhosi ekhonzwayo eqhuba ityiwa-minion daemon. Ipaki yakhutshwa kwiintsuku ezingama-20 ezidlulileyo ezilungisa obu bungozi, kodwa emva kokuvela kwesicelo sayo, kwabakho utshintsho olubuyela umva oluye lwadala ukuba ngumkhenkce kunye nokuphazamiseka kongqamaniso lwefayile.
- Ubungozi besibini (i-CVE-2020-11652) ivumela, ngokusebenzisa ubuqhetseba kudidi lwe-ClearFuncs, ukufikelela kwiindlela ngokudlulisa iindlela ezichazwe ngendlela ethile, enokusetyenziselwa ukufikelela ngokupheleleyo kwimikhombandlela engalawulekiyo kwi-FS yeseva eyintloko enamalungelo engcambu, kodwa ifuna ukufikelela okuqinisekisiweyo ( ukufikelela okunjalo kungafunyanwa kusetyenziswa ukuba sesichengeni kokuqala kwaye kusetyenziswe ubungozi besibini ukonakalisa ngokupheleleyo iziseko zophuhliso).