浜戝畨鍏ㄦ棩鎶�210719锛欼BM纭�欢绠＄悊鎺у埗鍙板彂鐜版潈闄愭彁鍗囨紡娲�,闇€瑕佸敖蹇�崌绾�

IBM Power Hardware Management Console锛圚MC锛夋槸IBM鍏�徃鐨勪竴濂楃敤浜庨厤缃�拰绠＄悊P浜戝ower System绯诲垪鏈嶅姟鍣ㄧ殑鍥惧舰鐣岄潰杞�欢銆傝�杞�欢涓昏�鐢ㄤ簬绠＄悊鏈嶅姟鍣ㄧ瓑纭�欢銆�7鏈�17鏃�,IBM畨鍏鍙戝竷浜嗗畨鍏ㄦ洿鏂�,淇��浜咺BM 纭�欢绠＄悊鎺у埗鍙颁腑鍙戠幇root鏉冮檺鎻愬崌婕忔礊銆備互涓嬫槸婕忔礊璇︽儏锛�

婕忔礊璇ㄦ棩︽儏

鏉ユ簮: https://www.ibm.com/support/pages/node/6473347

1.CVE-2021-297鎶�07 CVSS璇勫垎锛�8.4 涓ラ噸绋嬪害:閲嶈�

IBM HMC锛堢‖浠剁�鐞嗘帶鍒跺彴锛夊彲浠ュ厑璁告湰鍦扮敤鎴峰皢浠栦滑鐨勬潈闄21愭彁鍗囧埌鍙楅檺 shell 涓婄殑 root 璁块棶鏉冮檺銆�

2.CVE-2021-25215 CVSS璇勫垎锛�7.5 涓ラ噸绋嬪害:07閲嶈�

ISC BIND 瀹规槗鍙楀埌鎷掔粷鏈嶅姟鐨勫奖鍝嶏紝杩欐槸鐢卞湪鍥炵瓟 DNAME 璁板綍鏌ヨ�鏃舵柇瑷€澶辫触寮曡捣鐨勩€19傞€氳繃鍙戦€佸�DNAME璁板綍鐨勬煡璇�紝鏀诲嚮鑰呭彲浠ュ埄鐢ㄦ�婕忔礊瑙﹀彂澶辫触鐨勬柇瑷€妫€鏌ュ苟缁堟�鍛藉悕杩涚锛欼▼銆�

鍙楀奖鍝嶇殑浜у搧鍜岀増鏈�

涓婅堪婕忔礊褰卞搷Power HMC V9.1.910.0 鍙婃洿楂樼増鏈�,Power HMC HMC V9.BM2.950.0 鍙婃洿楂樼増鏈�.

瑙ｅ喅鏂规�

IBM Fix Central 涓婃彁渚涗簡浠ヤ笅淇��绋嬪簭锛歨ttp : //www-9纭�33.ibm.com/support/fixcentral/

Power HMC V9.1.940.0 SP2 ppc 搴旂敤琛ヤ竵MH01896

P欢绠ower HMC V9.1.940.0 SP2 x86_64 搴旂敤琛ヤ竵MH01895

Power HMC V9.2.950.0 SP1 ppc 搴旂＄悊敤琛ヤ竵 MH01893

Power HMC V9.2.950.0 SP1 x86_64 搴旂敤琛ヤ竵 MH01892

鏌ョ湅鏇村�婕忔礊淇℃伅 浠ュ強鎺у鍗囩骇璇疯�闂�畼缃戯細

https://www.ibm.com/blogs/psirt/