PwnKit, bhagi inopa super mushandisi ropafadzo uye inobata yakawanda Linux kugovera

PwnKit

Kana purojekiti ichigovera chinyorwa pane yepamutemo account uye isiri kubva kune yavo blog, chimwe chinhu chinoitika. Uye kwete, kwave kusiri kuwana chipfuva, asi kuzivisa nharaunda. It vakagovana naFedora inotaura nezve bug inonzi PwnKit, uye inobata akati wandei anonyanya kushandiswa Linux kugovera. Fedora iri pane iyo rondedzero, iyo vazhinji vanofunga kuti ndiyo yakanakisa muenzaniso kana isu tichida kutaura nezve distro neGNOME, asiwo mamwe maviri ari kunyanya kukwenya.

Hatisi kuzopinda mune sarudzo iri nani, asi Debian uye Ubuntu zvakare vari pakati peavo vakabatwa inotibvumira kutaura kuti vazhinji vevashandisi veLinux vaizoratidzwa kuPwnKit. Kune akawanda kugovera kwakavakirwa paDebian, uye zvimwe zvakawanda zvinotozviita paUbuntu, senge Linux mint. Rondedzero yeavo vakataurwa zvakananga yaizovharwa neCentOS neRed Hat, asi isu tose hatifanirwe kumira kunetseka.

PwnKit inofumura vazhinji vashandisi veLinux

Kusagadzikana kunoonekwa se CVE-2021-4034 (pano ruzivo kubva kuCanonical) uye iri muPolkit's pkexec chikamu, inova ndiyo yekumisikidzwa kweakawanda kugoverwa kweLinux. Kunyangwe zvavepo kweanopfuura makore gumi, yakaburitswa nezuro, Ndira 25, uye chigamba chiri kuuya munguva pfupi kune avo vasati vachigamuchira. Chinhu chakanyanya kushata ndechekuti mushandisi ane hutsinye anogona kuita nekuda kwePwnKit: tora mushandisi wepamusoro kana maropafadzo emidzi.

Ubuntu neRed Hat vakatoburitsa chigamba chekugadzirisa kusadzivirirwa mushanduro dzichangoburwa, uye kumwe kugovaniswa kwakakurumbira kunofanira kuzviita nekukurumidza. Tichifunga kuti zvigamba zverudzi urwu zvidiki zvigadziriso, ndizvo zvakare zvinogoneka kuti yedu Linux kugovera yakatozvibata isu tisingazvizive, asi chinhu chakakosha pano kurangarira chimwe chinhu chatinofanira kufunga nezvacho: zvakakosha kuve nechero sisitimu yekushandisa kusvika parizvino, uye kushandisa chengetedzo yekuvandudza kupfuura zvese.


Izvo zviri muchinyorwa zvinoomerera pamisimboti yedu ye tsika dzekunyora. Kuti utaure chikanganiso tinya pano.

Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa.

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako