浜戝畨鍏ㄦ棩鎶�210728锛欼BM楂樺彲鐢�(HA)鍜岀伨澶�(DR)瑙ｅ喅鏂规�鍙戠幇瀹夊叏缁曡繃婕忔礊,闇€瑕佸敖蹇�崌绾�

IBM VM Recovery Manager HA/DR鏄疘BM鍏�徃鐨勪竴濂楅珮鍙�敤(HA)鍜岀伨澶�(DR)瑙ｅ喅鏂规�銆�7鏈�27鏃�,IBM鍙戝竷浜嗗畨鍏ㄦ洿鏂�,淇��浜咺BM楂樺彲鐢�(HA)鍜岀伨浜戝澶�(DR)瑙ｅ喅鏂规�涓�彂鐜扮殑瀹夊叏缁曡繃婕忔礊銆備互涓嬫槸婕忔礊璇︽儏锛�

婕忔礊璇︽儏

鏉ユ簮: https://www.ibm.com/support/pages/node/6475691

1.绗�笁鏂规潯鐩畨鍏�細173110 CVSS璇勫垎锛�7.5 涓ラ噸绋嬪害:閲嶈�

npm涓�瓨鍦ㄧ殑婕忔礊褰卞搷IBM VM Recovery Manager銆侼odejs npm鍖呭彲鑳藉厑璁歌繙绋嬫敾鍑昏€呰幏鍙栨晱鎰熶俊鎭�紝杩欐槸鐢变ㄦ棩簬鏈�兘閫氳繃bin瀛楁�灏嗗垱寤虹殑绗﹀彿閾炬帴闄愬埗鍒皀ode_modules鏂囦欢澶逛箣澶栫殑鏂囦欢銆傞€氳繃鍙戦€佺壒鍒剁殑璇锋眰锛屾敾鍑昏€呭彲浠ュ埄鐢ㄦ�婕忔礊璁块棶鏈�粡鎺堟潈鐨勬枃浠�,骞朵娇鐢ㄦ鎶��淇℃伅瀵瑰彈褰卞搷鐨勭郴缁熷彂璧疯繘涓€姝ユ敾鍑汇€�

2.绗�笁鏂规潯鐩�細173111 CVSS璇勫垎锛�7.5 涓ラ噸绋嬪害:閲嶈�

npm涓�瓨鍦ㄧ殑婕忔礊褰卞搷IBM VM Recovery Manager銆侼odej21s npm鍖呭彲鑳藉厑璁歌繙绋嬫敾鍑昏€呯粫杩囧畨鍏ㄩ檺鍒讹紝杩欐槸鐢变簬鏃犳硶闄愬埗鍏ㄥ眬瀹夎�鐨勪簩杩涘埗鏂囦欢琚�叾浠栧寘瀹夎�瑕嗙洊銆傞€氳繃鍙戦€佺壒鍒剁殑璇锋眰锛屾敾鍑昏€呭彲浠ュ埄鐢ㄦ�婕忔礊瑕嗙07洊鍏ㄥ眬瀹夎�鐨勪簩杩涘埗鏂囦欢銆�

3.CVE-2019-16777 CVSS璇勫垎锛�6.2 涓ラ噸绋嬪害: 閲嶈�

npm涓�瓨鍦ㄧ殑婕忔礊褰卞搷IBM VM Recovery Manager銆俷pm CLI 鍙�兘鍏佽�28鏈�湴鏀诲嚮鑰呯粫杩囧畨鍏ㄩ檺鍒讹紝杩欐槸鐢变簬鏃犳硶闃叉�鐜版湁鐨勫叏灞€瀹夎�鐨勪簩杩涘埗鏂囦欢琚�叾浠栬蒋浠跺寘瀹夎�瑕嗙洊銆傛敾鍑昏€呭彲浠ュ埄鐢ㄦ�婕忔礊缁曡繃鏂囦欢绯荤粺璁块棶闄愬埗锛岀敤鍏ㄥ眬瀹夎锛欼�鐨勮蒋浠跺寘瑕嗙洊鐜版湁浜岃繘鍒舵枃浠躲€�

4.CVE-2019-16776 CVSS璇勫垎锛�6.2 涓ラ噸绋嬪害: 閲嶈�

npm涓�瓨鍦ㄧ殑婕忔礊褰卞搷IBM VM Recovery Manager銆俷pm CLI鍙�兘鍏佽�BM鏈�湴鏀诲嚮鑰呯粫杩囧畨鍏ㄩ檺鍒讹紝杩欐槸鐢变簬鏈�兘闃绘�閫氳繃bin瀛楁�璁块棶棰勬湡node_modules鏂囦欢澶逛箣澶栫殑鏂囦欢澶归€犳垚鐨勩€傛敾鍑昏€呭彲浠ュ埄鐢ㄦ�婕忔礊閫氳繃bin瀛楁�璁块楂樺棶棰勬湡node_modules鏂囦欢澶逛箣澶栫殑鏂囦欢澶广€�

5.CVE-2019-16775 CVSS璇勫垎锛�6.2 涓ラ噸绋嬪害: 閲嶈�

npm涓�瓨鍦ㄧ殑婕忔礊褰卞搷IBM VM Recovery Manager銆俷p彲鐢m CLI鍙�兘鍏佽�鏈�湴鏀诲嚮鑰呯粫杩囩敱浠绘剰鏂囦欢瑕嗙洊婕忔礊寮曡捣鐨勫畨鍏ㄩ檺鍒躲€傛敾鍑昏€呭彲浠ュ埄鐢ㄦ�婕忔礊缁曡繃鏂囦欢绯荤粺璁块棶闄愬埗锛屽湪瀹夎�鏃堕€氳繃 bin瀛楁�鍒涘缓鎸囧悜node�(_modules鏂囦欢澶瑰�鏂囦欢鐨勭�鍙烽摼鎺ャ€�

鍙楀奖鍝嶇殑浜у搧鍜岀増鏈�

涓婅堪婕忔礊褰卞搷IBM VM Recovery Manager HA/DR V1.5鍙婃洿鏃╃増鏈�

瑙ｅ喅鏂规�

IBM宸插彂甯冨畨鍏ㄦ洿鏂HA�,鍗囩骇VM Recovery Manager HA Version 1.5.0.1浠ュ強VM Recovery Manager DR Version 1.5.0.1鐗堟湰鍙�慨澶嶃€�

鏌ョ湅鏇村�婕忔礊淇℃伅 浠ュ強鍗囩骇璇疯)鍜�闂�畼缃戯細

https://www.ibm.com/blogs/psirt/