mirror of
https://github.com/LCTT/TranslateProject.git
synced 2025-02-25 00:50:15 +08:00
translated
This commit is contained in:
geekpi
parent
cdd37eb485
commit
c475826ef4
@ -1,74 +0,0 @@
|
|||||||
translating---geekpi
|
|
||||||
|
|
||||||
Protect your Fedora system against this DHCP flaw
|
|
||||||
======
|
|
||||||
|
|
||||||
|
|
||||||
A critical security vulnerability was discovered and disclosed earlier today in dhcp-client. This DHCP flaw carries a high risk to your system and data, especially if you use untrusted networks such as a WiFi access point you don’t own. Read more here for how to protect your Fedora system.
|
|
||||||
|
|
||||||
Dynamic Host Control Protocol (DHCP) allows your system to get configuration from a network it joins. Your system will make a request for DHCP data, and typically a server such as a router answers. The server provides the necessary data for your system to configure itself. This is how, for instance, your system configures itself properly for networking when it joins a wireless network.
|
|
||||||
|
|
||||||
However, an attacker on the local network may be able to exploit this vulnerability. Using a flaw in a dhcp-client script that runs under NetworkManager, the attacker may be able to run arbitrary commands with root privileges on your system. This DHCP flaw puts your system and your data at high risk. The flaw has been assigned CVE-2018-1111 and has a [Bugzilla tracking bug][1].
|
|
||||||
|
|
||||||
### Guarding against this DHCP flaw
|
|
||||||
|
|
||||||
New dhcp packages contain fixes for Fedora 26, 27, and 28, as well as Rawhide. The maintainers have submitted these updates to the updates-testing repositories. They should show up in stable repos within a day or so of this post for most users. The desired packages are:
|
|
||||||
|
|
||||||
* Fedora 26: dhcp-4.3.5-11.fc26
|
|
||||||
* Fedora 27: dhcp-4.3.6-10.fc27
|
|
||||||
* Fedora 28: dhcp-4.3.6-20.fc28
|
|
||||||
* Rawhide: dhcp-4.3.6-21.fc29
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### Updating a stable Fedora system
|
|
||||||
|
|
||||||
To update immediately on a stable Fedora release, use this command [with sudo][2]. Type your password at the prompt, if necessary:
|
|
||||||
```
|
|
||||||
sudo dnf --refresh --enablerepo=updates-testing update dhcp-client
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
Later, use the standard stable repos to update. To update your Fedora system from the stable repos, use this command:
|
|
||||||
```
|
|
||||||
sudo dnf --refresh update dhcp-client
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Updating a Rawhide system
|
|
||||||
|
|
||||||
If your system is on Rawhide, use these commands to download and update the packages immediately:
|
|
||||||
```
|
|
||||||
mkdir dhcp && cd dhcp
|
|
||||||
koji download-build --arch={x86_64,noarch} dhcp-4.3.6-21.fc29
|
|
||||||
sudo dnf update ./dhcp-*.rpm
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
After the nightly Rawhide compose, simply run sudo dnf update to get the update.
|
|
||||||
|
|
||||||
### Fedora Atomic Host
|
|
||||||
|
|
||||||
The fixes for Fedora Atomic Host are in ostree version 28.20180515.1. To get the update, run this command:
|
|
||||||
```
|
|
||||||
atomic host upgrade -r
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
This command reboots your system to apply the upgrade.
|
|
||||||
|
|
||||||
|
|
||||||
--------------------------------------------------------------------------------
|
|
||||||
|
|
||||||
via: https://fedoramagazine.org/protect-fedora-system-dhcp-flaw/
|
|
||||||
|
|
||||||
作者：[Paul W. Frields][a]
|
|
||||||
选题：[lujun9972](https://github.com/lujun9972)
|
|
||||||
译者：[译者ID](https://github.com/译者ID)
|
|
||||||
校对：[校对者ID](https://github.com/校对者ID)
|
|
||||||
|
|
||||||
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
|
||||||
|
|
||||||
[a]:https://fedoramagazine.org/author/pfrields/
|
|
||||||
[1]:https://bugzilla.redhat.com/show_bug.cgi?id=1567974
|
|
||||||
[2]:https://fedoramagazine.org/howto-use-sudo/
|
|
||||||
@ -0,0 +1,72 @@
|
|||||||
|
保护你的 Fedora 系统免受这个 DHCP 漏洞
|
||||||
|
======
|
||||||
|
|
||||||
|
|
||||||
|
今天早些时候在 dhcp-client 中发现并披露了一个严重的安全漏洞。此 DHCP 漏洞会对你的系统和数据造成高风险，尤其是在使用不受信任的网络如非你拥有的 WiFi 接入点时。阅读更多关于如何保护你的 Fedora 系统。
|
||||||
|
|
||||||
|
动态主机控制协议（DHCP）能让你的系统从其加入的网络获取配置。你的系统将请求 DHCP 数据，并且通常是路由器等服务器应答。服务器为你的系统提供必要的数据以进行自我配置。例如，你的系统如何在加入无线网络时正确进行网络配置。
|
||||||
|
|
||||||
|
但是，本地网络上的攻击者可能会利用此漏洞。使用在 NetworkManager 下运行的 dhcp-client 脚本中的漏洞，攻击者可能能够在系统上以 root 权限运行任意命令。这个 DHCP 漏洞使你的系统和数据处于高风险状态。该漏洞已分配 CVE-2018-1111，并且有[ Bugzilla 来跟踪 bug][1]。
|
||||||
|
|
||||||
|
### 防范这个 DHCP 漏洞
|
||||||
|
|
||||||
|
新的 dhcp 软件包包含 Fedora 26、27 和 28 以及 Rawhide 的修复程序。维护人员已将这些更新提交到 updates-testing 仓库。对于大多数用户而言，它们应该在这篇文章的大约一天左右的时间内在稳定仓库出现。所需的软件包是：
|
||||||
|
|
||||||
|
* Fedora 26: dhcp-4.3.5-11.fc26
|
||||||
|
* Fedora 27: dhcp-4.3.6-10.fc27
|
||||||
|
* Fedora 28: dhcp-4.3.6-20.fc28
|
||||||
|
* Rawhide: dhcp-4.3.6-21.fc29
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
#### 更新稳定的 Fedora 系统
|
||||||
|
|
||||||
|
要在稳定的 Fedora 版本上立即更新，请[使用 sudo ][2]运行此命令。如有必要，请在提示时输入你的密码：
|
||||||
|
```
|
||||||
|
sudo dnf --refresh --enablerepo=updates-testing update dhcp-client
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
之后，使用标准稳定仓库进行更新。要从稳定的仓库更新 Fedora 系统，请使用以下命令：
|
||||||
|
```
|
||||||
|
sudo dnf --refresh update dhcp-client
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
#### 更新 Rawhide 系统
|
||||||
|
|
||||||
|
如果你的系统是 Rawhide，请使用以下命令立即下载和更新软件包：
|
||||||
|
```
|
||||||
|
mkdir dhcp && cd dhcp
|
||||||
|
koji download-build --arch={x86_64,noarch} dhcp-4.3.6-21.fc29
|
||||||
|
sudo dnf update ./dhcp-*.rpm
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
在每日的 Rawhide compose 后，只需运行 sudo dnf update 即可获取更新。
|
||||||
|
|
||||||
|
### Fedora Atomic Host
|
||||||
|
|
||||||
|
针对 Fedora Atomic Host 的修复程序版本为 28.20180515.1。要获得更新，请运行以下命令：
|
||||||
|
```
|
||||||
|
atomic host upgrade -r
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
此命令将重启系统以应用升级。
|
||||||
|
|
||||||
|
|
||||||
|
--------------------------------------------------------------------------------
|
||||||
|
|
||||||
|
via: https://fedoramagazine.org/protect-fedora-system-dhcp-flaw/
|
||||||
|
|
||||||
|
作者：[Paul W. Frields][a]
|
||||||
|
选题：[lujun9972](https://github.com/lujun9972)
|
||||||
|
译者：[译者ID](https://github.com/译者ID)
|
||||||
|
校对：[校对者ID](https://github.com/校对者ID)
|
||||||
|
|
||||||
|
本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出
|
||||||
|
|
||||||
|
[a]:https://fedoramagazine.org/author/pfrields/
|
||||||
|
[1]:https://bugzilla.redhat.com/show_bug.cgi?id=1567974
|
||||||
|
[2]:https://fedoramagazine.org/howto-use-sudo/
|
||||||
Loading…
Reference in New Issue
Block a user