Kwiintsuku ezithile ezidlulileyo Impazamo ifunyenwe nge-X.Org Server yapapashwa, ibeka ukhuseleko lweenkqubo zeLinux kunye neBSD emngciphekweni.
Abasebenzi UZDNet ngulowo wenza isilumkiso ngolwaphulo mthetho olutsha kwi-X.Org eyavumela umhlaseli ukuba afumane ukufikelela kumda kwinkqubo.
Malunga nephutha elifunyenweyo
Impazamo ifunyenwe kwi-X.Org Server Ivumela umhlaseli ukuba afumane ukufikelela okulinganiselweyo kwinkqubo enokuthi idlule kwisiphelo sendlela okanye kwiseshoni ye-SSH ukude, ngaloo ndlela ulawule ukutshintsha iimvume kunye nokufezekisa indlela yeengcambu.
Ubungozi bufunyenwe Akukho kudidi lweentsilelo zohlobo "oluyingozi" Kwaye ayisiyiyo glitch enokukhathazeka icwangciswe kakuhle, iikhompyuter ezikhuselekileyo.
Kodwa le mpazamo incinci isetyenziswe kakuhle ngumhlaseli onolwazi olwaneleyo unokukhawuleza aguqule into engenalo ixhala lokuhlasela okubi, utsho uCatalin Cimpanu.
Ayinakusetyenziselwa ukungena kwiikhompyuter ezikhuselekileyo, kodwa iseluncedo kubahlaseli kuba inokujika ngokukhawuleza ukungena okulula kube ziipirouettes eziphosakeleyo.
Ngelixa ukuba semngciphekweni kungenakuhoywa yiLinux kunye noluntu lwe-infosec, oluthe lwathi lwakubakho esi siphoso sokhuseleko lwenziwa esidlangalaleni ngoLwesine odlulileyo, laqala ukusebenza ukulungisa.
Ukusilela kwakusele kufunyenwe kwiminyaka eyadlulayo
Umcebisi wezokhuseleko oviwe yi-ZDNet, uNarendra Shinde, uyilumkisile loo nto Esi siphoso sichazwe kwingxelo yabo kaMeyi ka-2016 kwaye ukuba iphakheji yeServer ye-X.Org iqulethe obu bungozi enokuthi inike abahlaseli ilungelo leengcambu kwaye inokutshintsha nayiphi na ifayile, nokuba zezona zibaluleke kakhulu kwinkqubo yokusebenza.
Obu bungozi yachongwa njengeCVE-2018-14665 kwaye kwajongwa kuyo into enokubangela impazamo enjalo.
Ukuphathwa ngokungachanekanga kwemigca emibini yekhowudi, ekubeni yimigca "-logfile" kunye "-modulepath", bekuya kubavumela abahlaseli ukuba bafake ikhowudi yabo enobungozi.
Le bug iskenwe xa i-X.Org Server isebenza ngamalungelo ezimpande kwaye oku kuqhelekile kwii-distros ezininzi.
Ulwabiwo oluchaphazelekayo
Los Abaphuhlisi beX.Org Foundation sele beceba isisombululo esitsha yenguqulelo yeX.Org 1.20.3 kwaye ukusombulula ezi ngxaki zibangelwa yile migca mibini.
Izabelo ezinje I-Red Hat Enterprise Linux, Fedora, CentOS, Debian, Ubuntu, kunye ne-OpenBSD sele iqinisekisiwe njengechaphazelekayo, nangona ezinye iiprojekthi ezincinci zichaphazelekayo.
Uhlaziyo lokhuselo oluqulathwe kwiphakheji yenzelwe ukulungisa umngcipheko we-X.Org Server ekufuneka usetyenziswe kwiiyure okanye kwiintsuku ezimbalwa ezizayo.
I-OpenBSD # 0day I-Xorg LPE nge-CVE-2018-14665 inokubangelwa kwiseshoni ekude ye-SSH, ayifuni kuba kwikhonsoli yendawo. Umhlaseli unokuthi athathe iinkqubo ezichaphazelekayo kunye nemiyalelo emi-3 okanye ngaphantsi. ukuxhaphaza https://t.co/3FqgJPeCvO ? pic.twitter.com/8HCBXwBj5M
-Hacker Fantastic (@hackerfantastic) Oktobha 25, 2018
Ngakolunye uhlangothi, KwiLinux Mint kunye no-Ubuntu ukulungiswa sele kukhutshiwe kwaye kwaqinisekiswa, kuya kufuneka uhlaziye inkquboNgelixa olunye ulwabiwo lungazi ukuba bazimisele ukukhulula isiziba okanye balinde leyo ikhutshwe liqela lophuhliso leX.Org.
"Umhlaseli angazithatha iinkqubo ezichaphazelekayo ngemiyalelo emi-3 okanye ngaphantsi," utshilo uHickey kuTwitter. Zininzi ezinye iindlela zokuxhaphaza, umzekelo i-crontab. Iyahlekisa indlela engenamsebenzi ngayo.
Oku kubonisa ukuba iLinux kunye ne-BSD ayizizo iinkqubo ezikhuselekileyo ngokupheleleyo, nangona kunjalo zizezinye ezizinzileyo nezikhuselekileyo xa kuthelekiswa neenkqubo zeWindows.
Gqibela Kungenxa yoko le nto imiba efana nale eku-X.org kunye nezinye esele zazisiwe kudala zibonisa kwakhona ukubaluleka kophuhliso olusebenzayo kwezinye iindlela ezinje ngeWayland.
Kuba iX.org yinkqubo endala kwaye ifuna ukutshintshwa ngoku, ngelishwa nokuba sinezinye iindlela ezinje ngeWayland okanye iMir ezi azomelelanga ngokwaneleyo ukubonelela ngokusebenziseka kwabo bonke.
Ezi ezinye iindlela sele zisasazwe kwiLinux kwaye ziye zavavanywa, nangona kwezinye zingakhange zisebenze njengoko bekulindelwe, (kunjalo kwimeko ka-Ubuntu ngeWayland). Ezi ezinye iindlela kwiX.org zisenendlela ende ekufuneka zihanjisiwe ngaphambi kokuba nayiphi na kwezi ibe ngumgangatho ngaphakathi kweLinux.