{"id":88071,"date":"2020-07-12T01:43:42","date_gmt":"2020-07-11T23:43:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti"},"modified":"2020-07-12T01:43:42","modified_gmt":"2020-07-11T23:43:42","slug":"obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","title":{"rendered":"Opdatering af Tor 0.3.5.11, 0.4.2.8 og 0.4.3.6 med l\u00f8sning af DoS-s\u00e5rbarhed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pr\u00e6senteret<\/a><\/noindex> korrektive udgivelser af Tor-v\u00e6rkt\u00f8jer (0.3.5.11, 0.4.2.8, 0.4.3.6 og 4.4.2-alpha), der anvendes til at organisere driften af det anonyme Tor-netv\u00e6rk. I de nye versioner er der rettet ASLR i programmer med setuid-flaget og bestemme adressefordelingen i de indl\u00e6ste biblioteker gennem manipulation af milj\u00f8variablen LD_PREFER_MAP_32BIT_EXEC.<\/a><\/noindex> (CVE-2020-15572), for\u00e5rsaget af adgang til hukommelsesomr\u00e5der uden for gr\u00e6nserne af den tildelte buffer. S\u00e5rbarheden giver en fjernangriber mulighed for at udl\u00f8se et crash i tor-processen. Problemet opst\u00e5r kun, n\u00e5r der er bygget med NSS-biblioteket (som standard bygges Tor med OpenSSL, og brugen af NSS kr\u00e6ver angivelse af flaget «—enable-nss»).<\/p>\n

Yderligere pr\u00e6senteret<\/a><\/noindex> planen for oph\u00f8r med st\u00f8tte til den anden version af onion-serviceprotokollen (tidligere kaldet skjulte tjenester). For halvandet \u00e5r siden i udgivelsen 0.3.2.9 blev brugerne informeret er foresl\u00e5et<\/a><\/noindex> den tredje version af protokollen for onion-tjenester, bem\u00e6rkelsesv\u00e6rdig ved overgangen til 56-tegns adresser, mere p\u00e5lidelig beskyttelse mod datal\u00e6kager gennem katalogservere, en udvidelig modul\u00e6r struktur og anvendelse af SHA3, ed25519 og curve25519-algoritmer i stedet for SHA1, DH og RSA-1024. <\/p>\n

Den anden version af protokollen blev udviklet for omkring 15 \u00e5r siden og kan ikke betragtes som sikker i moderne forhold p\u00e5 grund af brugen af for\u00e6ldede algoritmer. I betragtning af udl\u00f8bet af supporttiden for de gamle grene underst\u00f8tter enhver aktuel Tor-gateway nu den tredje version af protokollen, som tilbydes som standard ved oprettelse af nye onion-tjenester. <\/p>\n

Den 15. september 2020 vil Tor begynde at advare operat\u00f8rer og kunder om for\u00e6ldelsen af den anden version af protokollen. Den 15. juli 2021 vil supporten for den anden version af protokollen blive fjernet fra kodebasen, og den 15. oktober 2021 vil en ny stabil udgivelse af Tor blive udgivet uden st\u00f8tte for den gamle protokol. Dermed har ejere af gamle onion-tjenester 16 m\u00e5neder til at overg\u00e5 til den nye version af protokollen, som kr\u00e6ver, at der genereres en ny 56-tegns adresse for tjenesten.<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 \u0438 4.4.2-alpha), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Tor. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-15572), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 tor. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u043a\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 NSS (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Tor \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u0441 OpenSSL, \u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-88071","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Opdatering af Tor 0.3.5.11, 0.4.2.8 og 0.4.3.6 med rettelse af DoS-s\u00e5rbarhed | ProHoster","description":"Der er pr\u00e6senteret korrektive udgivelser af Tor-v\u00e6rkt\u00f8jer (0.3.5.11, 0.4.2.8, 0.4.3.6 og 4.4.2-alpha), der bruges til organisering.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Tor 0.3.5.11, 0.4.2.8 \u0438 0.4.3.6 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 \u0438 4.4.2-alpha), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-11T23:43:42+00:00","article:modified_time":"2020-07-11T23:43:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"88071","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:37:28","updated":"2022-09-27 15:52:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/88071","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=88071"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/88071\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=88071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=88071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=88071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}