Ukuba semngciphekweni kweGhostscript kunokusetyenziselwa ukufikelela kwiifayile ezingafaniyo ku-Ubuntu

Kwiiyure ezimbalwa ezidlulileyo, kwiCanonical li papashwe ingxelo apho athetha khona nge Ukuba sesichengeni kwiGhostscript Ichaphazela zonke iinguqulelo ze-Ubuntu ezixhaswayo kumjikelo wazo wobomi oqhelekileyo. Okwangoku, ezo nguqulelo ziyi-Ubuntu 19.04 Disco Dingo, Ubuntu 18.04 LTS Bionic Beaver, kunye ne-Ubuntu 16.04 LTS Xenial Xerus. Isoftware echaphazelekayo yi "ghostscript-PostScript kunye netoliki ye-PDF" kunye neepatches ezichanekileyo zizonke zokuba sesichengeni kwe-4 CVE.

Ubuthathaka obufunyenweyo kwaye sele bulungisiwe zezi I-CVE-2019-14811, I-CVE-2019-14812, I-CVE-2019-14813 y I-CVE-2019-14817, bonke baphathwa njenge ukungxamiseka okuphakathi. Zonke zone zabelana ngenkcazo eneenkcukacha 'Iindlela ezikhuselekileyo ze-ByPass ngokuvezwa kwemveliso kwi» .pdf_hook_DSC_Mdali, setuserparams, iiseti kwaye.lukdiso ngokulandelelana. Iiphakheji zokuhlaziya zezi ghostcript-9.26 ~ dfsg + 0-0ubuntu7.3 y libgs9 – 9.26~dfsg+0-0ubuntu7.3 Ubuntu 19.04, ghostcript-9.26 ~ dfsg + 0-0ubuntu0.18.04.11 y libgs9 – 9.26~dfsg+0-0ubuntu0.18.04.11 Ubuntu 18.04 kunye ghostcript-9.26 ~ dfsg + 0-0ubuntu0.16.04.11 y libgs9 – 9.26~dfsg+0-0ubuntu0.16.04.11 Ubuntu 16.04.

Umngcipheko kwi-Ghostscript ufikile ecaleni kwelinye kwi-Ceph

Oku kusengozini yeGhostscript ayisiyiyo kuphela iCanonical ekhutshiweyo namhlanje. Kungekudala emva koko waxela enye, kule meko kwi «ceph - ukuhambisa ukugcinwa kunye nenkqubo yefayile«, Echaphazela Ubuntu 19.04 kunye no-Ubuntu 18.04. Impazamo ephathwayo kwaye esele ilungisiwe yile I-CVE-2019-10222 kunye neenkcukacha ngobunye ubungozi bokungxamiseka okuphakathi apho UCeph Ingasetyenziselwa ukuzibhloka ukuba ifumene itrafikhi eyakhiwe ngokukodwa. Umhlaseli okude unokusebenzisa esi siphoso ukwenza ukwala inkonzo (DoS). Iimpawu eziza kusetyenziswa kulo mzekelo zezi UCeph-13.2.6-0ubuntu0.19.04.3 y Ingxelo: 13.2.6-0ubuntu0.19.04.3 Ubuntu 19.04 kunye UCeph-12.2.12-0ubuntu0.18.04.2 y Ingxelo: 12.2.12-0ubuntu0.18.04.2 Ubuntu 18.04.

Zonke iipatches sele zifumanekile njengohlaziyo, ke ukuzisebenzisa nokuzikhusela kubuthathaka obukhankanywe kweli nqaku kulula njengokuvula usetyenziso lweSoftware okanye naliphi na iziko lesoftware kwaye sebenzisa uhlaziyo.

Inqaku elidibeneyo:

I-Canonical ilungisa ukuba semngciphekweni kwe-PHP kuzo zonke iinguqulelo ezixhaswayo ze-Ubuntu