Noma yimuphi umsebenzisi we-Ubuntu osezingeni eliphakathi uyazi ukuthi bakhipha inguqulo entsha yesistimu yabo yokusebenza njalo ezinyangeni eziyisithupha, ukuthi njalo eminyakeni emibili kuba nenguqulo ye-LTS, nokuthi i-kernel ingathatha isikhathi eside ukuyibuyekeza. Eqinisweni, uma ikwenza, yenza kanjalo ezinguqulweni ze-LTS uma singalandeli izinyathelo ezimbalwa ezifana nalezi eziku-LTS. le ndatshana yokuthi ungayigcina kanjani ku-Focal Fossa. Iqiniso liwukuthi i-kernel ibuyekeziwe, kodwa ukwengeza ama-patches okuphepha njengoba enzile kuzo zonke izinguqulo ze Ubuntu esezisekelwa manje.
Emahoreni ambalwa edlule, iCanonical ishicilelwe imibiko emithathu ye-USN, ikakhulukazi I-USN-5443-1, I-USN-5442-1 y I-USN-5444-1. Eyokuqala yazo ithinta zonke izinguqulo ze-Ubuntu ezisasekelwa, okuyi-Ubuntu 22.04 esanda kukhishwa, okuwukuphela kwenguqulo engasekelwa i-LTS, engu-21.10, bese kuba yi-18.04 kanye ne-16.04, esekelwa okwamanje ngenxa yokungena esigabeni sayo se-ESM. , okuyivumela ukuthi iqhubeke nokuthola amapheshana okuvikela.
Ubuntu bubuyekeza i-kernel yayo ukuze ivikeleke
Encazelweni ye-USN-5443-1, sifunda ukwehluleka okubili:
(1)Ukuhlelwa kwenethiwekhi ye-Linux kernel kanye nesistimu engaphansi yomugqa ayenzanga ukubala ireferensi ngendlela efanele kwezinye izimo, okuholela ekubeni sengozini yokusebenzisa ngemva kwamahhala. Umhlaseli wasendaweni angasebenzisa lokhu ukuze abangele ukunqatshelwa kwesevisi (ukuphahlazeka kwesistimu) noma akhiphe ikhodi engafanele. (2)I-Linux kernel ibingasebenzisi kahle imikhawulo ye-seccomp kwezinye izimo. Umhlaseli wasendaweni angasebenzisa lokhu ukuze adlule imikhawulo ehlosiwe ye-seccomp sandbox.
Mayelana ne-USN-5442-1, ethinta kuphela u-20.04 no-18.04, ezinye iziphazamisi ezintathu:
(1)Uhlelo olungaphansi Lokulandelana Kwenethiwekhi nokuhlela lwe-Linux kernel alwenzanga ukubala kwereferensi ngendlela efanele kwezinye izimo, okuholela ekubeni sengozini yokusebenzisa ngemva kwamahhala. Umhlaseli wasendaweni angasebenzisa lokhu ukuze abangele ukunqatshelwa kwesevisi (ukuphahlazeka kwesistimu) noma akhiphe ikhodi engafanele. (2)Isistimu engaphansi ye-io_uring ye-Linux kernel iqukethe ukuchichima okuphelele. Umhlaseli wasendaweni angayisebenzisa ukuze abangele ukunqatshelwa kwesevisi (ukuphahlazeka kwesistimu) noma akhiphe ikhodi engafanele. (3)I-Linux kernel ibingasebenzisi kahle imikhawulo ye-seccomp kwezinye izimo. Umhlaseli wasendaweni angasebenzisa lokhu ukuze adlule imikhawulo ehlosiwe ye-seccomp sandbox.
Futhi mayelana ne-USN-5444-1, ethinta Ubuntu 22.04 kanye ne-20.04;
I-Network Queuing and Shejuling subsystem ye-Linux kernel ayizange ibale ireferensi ngendlela efanele kwezinye izimo, okuholela ekubeni sengozini yokusebenzisa ngemva kwamahhala. Umhlaseli wasendaweni angasebenzisa lokhu ukuze abangele ukunqatshelwa kwesevisi (ukuphahlazeka kwesistimu) noma akhiphe ikhodi engafanele.
Ukuze ugweme zonke lezi zinkinga, into kuphela okudingeka yenziwe ukuvuselela i-kernel, futhi lokhu kungenziwa ibuyekeza ngokuzenzakalelayo ngethuluzi lokuvuselela kwanoma yikuphi ukunambitheka okusemthethweni kwe-Ubuntu. Futhi, khumbula ukuthi kufanelekile ukuthi uhlelo lokusebenza luvuselelwe kahle, okungenani ngamapheshana okuphepha akamuva.