UGreg Kroah-Hartman, onoxanduva lokugcina isebe elizinzileyo leKernel kernel yazise Ndisele iintsuku ezininzi Isigqibo sokwala naluphi na utshintsho oluvela kwiDyunivesithi yaseMinnesota ukuya kwi-Linux kernel, kwaye ubuyisele zonke iipatches ezamkelweyo ngaphambili kwaye uphinde uziqwalasele.
Isizathu sokubhloka yayiyimisebenzi yeqela lophando efunda ukuba kunokwenzeka kokukhuthaza ukuba semngciphekweni okufihliweyo kwikhowudi yeeprojekthi zomthombo ovulekileyo, kuba eli qela lithumele iipatches ezibandakanya iimpazamo zeentlobo ezahlukeneyo.
Ngokunikwa umxholo wokusebenzisa isikhombisi, ibingenangqondo kwaye injongo yokungeniswa kwepatch yayikukuphanda ukuba ngaba utshintsho oluphosakeleyo lwaluzakudlulisa uphononongo lwabaphuhlisi be kernel.
Ukongeza kwesi siqwenga, Kukho ezinye iinzame zabaphuhlisi kwiDyunivesithi yaseMinnesota zokwenza iinguqu ezithandabuzekayo kwikernel, kubandakanya ezo zinxulumene nokongeza ubuthathaka obufihliweyo.
Umxhasi othumele iipatches uzamile ukuzithethelela kuvavanywa i-static analyzer entsha kwaye utshintsho lwalungiswa ngokusekelwe kwiziphumo zovavanyo kuyo.
Kodwa UGreg watsalela ingqalelo kwinto yokuba izilungiso ezicetywayo aziqhelekanga zeempazamo ezifunyenwe ngabahlalutyi be-static, kwaye iipatches ezithunyelweyo azisombululi kwanto. Ukusukela ukuba iqela labaphandi ekuthethwa ngalo sele lizamile ngaphambili ukwazisa ngezisombululo ezinobungozi obufihliweyo, kuyacaca ukuba baqhubekile nokuzama kwabo kuluntu lophuhliso lwekernel.
Into enomdla kukuba, kwixa elidlulileyo, inkokeli yeqela lokulinga ibibandakanyekile kulungiso lwezinto ezisemngciphekweni ezisemthethweni, ezinje ngokuvuza kolwazi kwisitaki se-USB (CVE-2016-4482) kunye neenethiwekhi (CVE-2016-4485).
Kuphononongo lokusasazeka komngcipheko ofihliweyo, iqela leYunivesithi yaseMinnesota likhankanya umzekelo wokuba semngciphekweni kwe-CVE-2019-12819, okubangelwa sisiqwenga esamkelweyo kwikernel ngo-2014. Kwi-mdio_bus, kodwa kwiminyaka emihlanu kamva kwavezwa ukuba ubuqhetseba obunjalo bunokubangela ukufikelela emva kokungena simahla kwibhloko yememori.
Kwangelo xesha, ababhali abafundayo bathi emsebenzini wabo bashwankathela idatha kumanqaku ali-138 azisa iimpazamo, kodwa azihambelani nabathathi-nxaxheba.
Imizamo yokungenisa ii-bug patches zakho yayilinganiselwe kwimbalelwano yeposi kwaye olo tshintsho aluzange luye kwinqanaba le-Git ukuzibophelela kulo naliphi na isebe le-kernel (ukuba emva kokuthumela i-imeyile isiziba somlondolozi ufumanise ukuba isiqhelo siqhelekile, emva koko ucelwe ukuba ungalubandakanyi utshintsho kuba kukho impazamo, emva koko ichanekile Ipatch yathunyelwa).
Kwakhona, ngokugweba ngomsebenzi wombhali wolungiso olugxekwayo, kudala efaka ii-kernel subsystems ezahlukeneyo. Umzekelo i-radeon kunye nabaqhubi be-nouveau kutshanje bamkele utshintsho kwi-pm_runtime_put_autosuspend (dev-> dev) iimpazamo zebhloko, inokukhokelela ekusebenziseni i-buffer emva kokukhupha inkumbulo ehambelana nayo.
Kukwakhankanyiwe ukuba UGreg waqengqeleka emva kwe-190 yokwenza izinto kunye nokuqala ngokutsha. Ingxaki kukuba @ umn.edu abanikeli abalinganga kuphela ukukhuthaza iipatches ezithandabuzekayo, balungisa ubuthathaka bokwenyani, kwaye ukubuyisela umva utshintsho kungakhokelela ekubuyisweni kwemicimbi yezokhuseleko yangaphambili. Abanye abalondolozi sele beqwalasele iinguqu ezingakhange zenziwe kwaye abafumananga ngxaki, kodwa bekukho neempazamo zebug.
ISebe lezeNzululwazi kwiKhompyutha kwiYunivesithi yaseMinnesota ikhuphe ingxelo ukubhengeza ukumiswa kophando kule ndawo, ukuqala ukuqinisekiswa kweendlela ezisetyenzisiweyo kunye nokuqhuba uphando malunga nendlela olwamkelwe ngayo uphando. Ingxelo yeziphumo iza kwabiwa noluntu.
Okokugqibela uGreg ukhankanya ukuba uzijongile iimpendulo ezivela eluntwini kwaye uyithathele ingqalelo inkqubo yokujonga iindlela zokukhohlisa inkqubo yoqwalaselo. Ngokoluvo lukaGreg, ukwenza olo vavanyo ukuzisa utshintsho olunobungozi akwamkelekanga kwaye akulunganga.
Umthombo: https://lkml.org