libgcrypt 1.9.0 ndiyo vhezheni nyowani yekunyorera raibhurari yakavakirwa mune inozivikanwa GNU Yekuchengetedza Guard (GPG) chirongwa. Sezvo iwe uchinyatso kuziva, iyi inoshanda chaizvo software iyo iwe yaunogona kusaina data, encrypt mafaera kuvadzivirira kubva paku prying maziso echitatu mapato, nezvimwe Zvakare, iwe unogona kusarudza pakati pemhando dzakasiyana dzekunyorera uye algorithms aripo.
Huye, raibhurari iyi rave dambudziko, nekuti ivo vakawana kuomarara kwakanyanya mairi uye izvo zvinogona kukanganisa kuchengetedzwa kwesoftware iyi. Uyezve, hazvisi chete inoshandiswa naGnuPGIyo inoshandiswawo neimwe software yekunyorera, saka inogona kukanganisa mamwe mapurogiramu nenzira imwecheteyo.
Pane yekuvandudza tsamba yekutumira yeprojekti iyi, iye anovandudza ari kumashure kweGnuPG naLibgcrypt, atumira meseji yekuzivisa nezve dambudziko iri. Dambudziko rave richishanda kwemazuva mashoma, kubvira Libgcrypt 1.9.0 yakaburitswa muna Ndira 19, 2021, zvinoreva kuti yaive yakabatanidzwa mune yeGnuPG 2.3 vhezheni.
Koch, anovandudza, haina kutanga yasimbisa mabviro ehunhu hwekukuvadzwa uku, zvave kungogumira kuzivisa vashandisi kuti varege kushandisa raibhurari yekunyorera uye vazivisa patsva kugadzirisa dambudziko iri rekuchengetedza.
Asi mazuva mashoma gare gare, muna Ndira 26, yaizopa rumwe ruzivo nezve iyi nenjodzi yakaoma inoenderera isina CVE. Iri idambudziko rinogona kutora mukana we buffer kufashukira, izvo zvinogona kukonzera uyo anorwisa kuti akwanise kuwana iyo data pasina kuisirwa kana siginecha, iri maererano.
Kana ari iye anowana dambudziko iri, ndiye muongorori Tavis Ormandy anobva Google Project Zero. Uye, sezvatakadzidza, zvinongobata iyo Libgcrypt 1.9.0 vhezheni, uye kwete dzimwe shanduro.
Kana iwe uri mumwe wevakakanganiswa vane iyi vhezheni yeraibhurari iyi, unogona access here, sezvo paine iyo yakagadziridzwa vhezheni ine chigamba chinoigadzirisa. Ndiyo Libgcrypt 1.9.1.