Jan 21, 2016
Kwemazuva mashomanana apfuura, Perception Point, yeIsrael cybersecurity firm, yakawana kusachengetedzwa kwezuva kwezuva nezuva mu Linux kernel iyo inopa nhamba dzisingagumi dzevashandi, PCs desktop uye, kunyanya kukosha, madivashoni e-Android-powered mobile . Muchengeti anoda kushandisa zvakashata izvi, anogona kuwana ruzivo rwemukati-purogiramu uye anogona kuwana ruzivo rusina kubvumirwa kune deta kana kuita kodhi maererano nezvinodiwa zvake.
Zvimwe nezve Linux Kernel Flaw
Maererano nenyanzvi, chikonzero chechikanganiso chiri mukati memhando ye Linux kernel , iyo yakafanana zvakafanana kumaseva, PC uye Android zvigadzirwa. Ichi chakaipa, icho chakapiwa zita rinonzi CVE-2016-0728, inotendwa kuti yakakanganisa kupfuura 60 muzana yezvinhu zvose zve-Android-powered devices. Zvichiitika, ichi chisina kukanganisa chakaita kuti chionekwe kare muna 2012 mu Linux version 3.8 uye ichiripo pane zvose zviri 32-bit uye 64-bit Linux-based systems.
Chinovhiringidza pano ndechokuti kushungurudzika kwave kuripo kwemakore anoda kusvika matatu uye zvingave zvichibvumira vatengesi kuti vawane kutenderwa kusina kutenderwa pamusoro pe Linux-run servers, PCs, Android uye nemamwe mafaira akaiswa. Iko inowanzobva kune kernel's keyring facility uye inobvumira mapurogiramu anoshanda pasi pevashandi vemunharaunda kuti aite code mukati kernel. Izvi zvinoreva kuti kushungurudzika kunogona kuisa ruzivo rwevashandi nezvekutsvaga, kusanganisira kuvimbiswa uye zvinyorwa zvinyorwa, pangozi yekudzivirirwa.
Nzira iyo inogona kuisa Pasi kune Android
Chinhu chinogona kuita kuti kutyisidzika uku kunetseke zvikuru ndechokuti kunobata zvose zvivakwa, kusanganisira ARM. Izvi zvinongoreva kuti, iyo yose madivayiri eAroid anoshandisa Android 4.4 KitKat uye gare gare, mirai kuti ichinzwe nayo. Pari zvino, izvi zvinowedzera anenge makumi manomwe kubva muzana yezviyo zvose zveAroid.
Iyo Android OS yakatozivikanwa nokuda kwehupamhi hwayo hwekuparadzana uye inovandudza kunonoka. Google inokonzera kuchengetedzwa kwezvigadziriswe nevadziri vezviyero, avo vanozoishandisa zvidimbu. Iyo kambani inoparadzira zvimwe zvinyorwa musangano pamwe nevanotakura vatakuri vefambisi . Kuti uwedzere kubatanidza nyaya, dzakawanda zvezvigadzirwa izvi zvinogamuchira sangano rekusevenza kwekanguva kwemwedzi gumi nemasere, mushure mokunge vasagamuchirizve mamwe mavandidzi kana mapepa. Izvi zvinoreva kuti vazhinji vashandisi vekushandisa, kunyanya avo vanoshandisa madivayiri akare eAroid, vangazombofi vakwanisa kuwana zvinyorwa zvitsva uye zvigadziriswa.
Ichi chiitiko chingaita sechiratidza kune vashandisi kuti maBhaibheri ekare eAroid haachazove akachengetedzeka kushandiswa uye kuti vanofanira kugara vachivandudza mafaira avo kuitira kuti vawane zvinhu zvekuchengetedzwa zvino uye mamwe mabasa. Izvowo zvingadai zvisingabatsiri kugadzirisa dambudziko racho - kwete munhu wese angave achida kuramba achichinja smartphone yavo kana piritsi imwe kamwe mumakore maviri emakore.
Kusvika ikozvino, indasitiri yefodya yakave yakarongedzwa kune mhando dzefaira rekushandisa malware yakave isinganyatsonzwisisiki. Kusvika panguva ino, hapana hutambuko yakakonzera kutyisa kwechokwadi, kwakakomba kuvashandisi. Zvisinei, chokwadi ichocho chinoramba chiripo kuti Android ndiyo inonyanya kutsvaga yemarware uye inogona kungova nyaya yenguva isati yasvika mumwe munhu anotanga kukurwisa kukuru pamusoro pekukanganisa kwayo kuripo.
Iko Linux neGoogle Plan yekuita
Nenzira yakanaka, kunyange kutyisidzira kuripo, hakuna kutyisidzira kuri kuonekwa. Zvisinei, nyanzvi dzekuchengetedza dzichave dzichichera zvakadzika kuti dziwane kana ichi chisina kukanganiswa pane imwe nguva munguva yapfuura yapfuura. Linux uye Red Hat makambani ekuchengetedza vatotanga kushanda kuti vabudise maitiro akafanana - anofanira kunge aripo pakupera kwevhiki rino. Zvisinei, pane zvakasungirwa kuva nezvimwe zvirongwa zvingave zvichiri kuramba zvichishungurudzwa, kwenguva yakati.
Google haina kukwanisa kupa mhinduro yakananga uye yakananga pamusoro pokuti chikanganiso chaizonyorwa sei mukati mekodeti ye Android. Izvi zvisikwa, zvichange zvakasununguka, zvinenge zviri kune vanogadzirisa zvigadzirwa nevatadzi kuwedzera uye kugovera patch kune vatengi vavo. Munguva iyi, Google, sezvainogara ichi, inoramba ichitsvaga zvinyorwa zvemwedzi uye zvigadzirisho zvegadziriro yeNexus line yeAroid devices. Iyo giant inoronga kutsigira imwe neimwe yerudzi rwayo kweanenge makore maviri mushure mezuva rekutengeswa kwekutanga muchitoro chendaneti .