NgoLwesibini odlulileyo, iCanonical waphosa Iinguqulelo ezintsha ze-kernel ze-Ubuntu 19.04 kunye no-Ubuntu 18.04. Nangona inxenye yento eyayikhutshelwe iBionic Beaver nayo yayithunyelwe kwiXenial Xerus, inguqulelo ka-Ubuntu ekhutshwe ngo-Epreli ka-2016 yayingakhange ifumane uhlobo oluthile, kude kube namhlanje: inkampani eqhuba uMark Shuttleworth ikhuphe Uhlaziyo lwe-kernel ye-Ubuntu 16.04 ukulungisa iimpazamo ezintandathu zizonke, enye kuzo ukusukela ngo-2018 kwaye akukho nzulu kakhulu.
Ngokungafaniyo neenguqulelo ezikhutshwe ngomhla wama-23, into ekhutshwe izolo ifumaneka kuphela kubasebenzisi be-Ubuntu 16.04, ngakumbi abo zisasebenzisa i-Linux 4.4 kernel. Abasebenzisi abaphuculweyo kuhlobo lwamva lwe-Ubuntu okanye i-kernel yayo abachaphazeleki. Nantsi into egqityiweyo yinguqulelo entsha.
Yintoni elungiswa yikernel umfanekiso we-linux 4.4.0-157.185
- I-CVE-2018-20836Imeko yomdyarho yafunyanwa ikho kusetyenziso lwe-serial Attached SCSI (SAS) kwi-Linux kernel. Umhlaseli wasekhaya unokusebenzisa oku ukwenza ukwaliwa kwenkonzo (ukuphazamiseka) okanye ukwenza ikhowudi yokuchasana nomthetho. Eyona nto iphambili kuyo: iphantsi.
- I-CVE-2019-10142: Ukuphuphuma okupheleleyo kufunyenwe kumphathi we-Freescale hypervisor (PowerPC) kwi Linux kernel. Umhlaseli wendawo kunye bhala ukufikelela kwi / dev / fsl-hv kunokusebenzisa oku ukwenza ukwaliwa kwenkonzo (crash) okanye enze ikhowudi yokuchasana nomthetho. Izinto eziphambili ngokubaluleka: ziphantsi kakhulu, azinakwa.
- I-CVE-2019-11833: Kwafunyaniswa ukuba ukuphunyezwa kwenkqubo yefayile ye-ext4 kwi-Linux kernel ayenzanga imemori eyi-zero ngokuchanekileyo kwezinye iimeko. Umhlaseli wendawo ungasebenzisa oku ukubhengeza ulwazi olubuthathaka (inkumbulo yekernel). Eyona nto iphambili phakathi.
- I-CVE-2019-11884: Kwafunyaniswa ukuba ukuphunyezwa kweBluetooth HIDP (iProtokholi yoLuntu yeNkqubo yoLuntu) kwi-kernel yeLinux ayikhange ikhangele ngokuchanekileyo imigca apho i-NULL iphele kwiimeko ezithile. Umhlaseli wendawo unokusebenzisa oku ukubonisa ulwazi olubuthathaka (inkumbulo yenkozo). Eyona nto iphambili phakathi.
- I-CVE-2019-9503: U-Hugues Anguelkov ufumanise ukuba umqhubi we-Broadcom Wifi kwikernel khange ikhusele ngokuchanekileyo imicimbi ye-firmware ekude ukuba iqhubekeke izixhobo ze-WiFi ze-USB. Umhlaseli osondeleyo angayisebenzisa le nto eThumela imicimbi ye-firmware kwisixhobo. Eyona nto iphambili phakathi.
- I-CVE-2019-2054: I-Linux kernel kwiiprosesa ze-ARM yafunyanwa ukuvumela inkqubo yokulandela umkhondo ukuguqula i-syscall emva kokuba isigqibo se-seccomp senziwe kuloo nto syscall. Umhlaseli wasekhaya unokusebenzisa oku ukudlula kwisithintelo seccomp.
Inguqulelo entsha ye-kernel yeXenial Xerus yile umfanekiso we-linux 4.4.0-157.185. Njengamaxesha onke, iCanonical ikhuthaza bonke abasebenzisi be-Ubuntu 16.04.x ngeLinux 4.4 ukuba bahlaziye ngokukhawuleza.