{"id":88071,"date":"2020-07-12T01:43:42","date_gmt":"2020-07-11T23:43:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti"},"modified":"2020-07-12T01:43:42","modified_gmt":"2020-07-11T23:43:42","slug":"obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","title":{"rendered":"Tor 0.3.5.11, 0.4.2.8 ja 0.4.3.6 versioonide uuendus DoS-haavatavuse k\u00f5rvaldamisega","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Esitatud<\/a><\/noindex> Tor-i t\u00f6\u00f6riistakomplekti (0.3.5.11, 0.4.2.8, 0.4.3.6 ja 4.4.2-alpha) parandavad v\u00e4ljaanded, mida kasutatakse anonyymse Tor-v\u00f5rgu toimimise korraldamiseks. Uutes versioonides on k\u00f5rvaldatud haavatavus<\/a><\/noindex> (CVE-2020-15572), mis p\u00f5hjustatud m\u00e4luruumi piirkonna juurde p\u00e4\u00e4semisest, mis j\u00e4\u00e4b m\u00e4\u00e4ratud puhvri piiridest v\u00e4lja. See haavatavus v\u00f5imaldab kaugpoolse r\u00fcndaja algatada tor protsessi kokkuvarisemise. Probleem ilmneb ainult siis, kui see on kompileeritud NSS raamatukoguga (vaikimisi kompileeritakse Tor OpenSSL-iga ja NSS kasutamine n\u00f5uab lipu m\u00e4\u00e4ramist «—enable-nss»).<\/p>\n

Lisaks esitati<\/a><\/noindex> kava l\u00f5petada onion-teenuste protokolli teise versiooni tugi (varem tuntud kui varjatud teenused). Poolteist aastat tagasi versioonis 0.3.2.9 said kasutajad on pakutud<\/a><\/noindex> kolmanda versiooni protokoll onion-teenustele, millel on 56-m\u00e4rgiselt aadressid, usaldusv\u00e4\u00e4rsem kaitse andmelekete eest katalogiseerimisteenuste kaudu, laiendatav moodulstruktuur ja SHA3, ed25519 ja curve25519 algoritmide kasutamine SHA1, DH ja RSA-1024 asemel. <\/p>\n

Teine versiooni protokoll loodi umbes 15 aastat tagasi ja aegunud algoritmide kasutamise t\u00f5ttu ei saa seda t\u00e4nap\u00e4eva tingimustes pidada turvaliseks. Arvestades vanade harude toe l\u00f5ppemist toetab iga kaasaegne Tor-i v\u00e4rav kolmanda versiooni protokolli, mis pakutakse vaikimisi uute onion-teenuste loomisel. <\/p>\n

15. septembril 2020 annab Tor operaatoritele ja klientidele hoiatuse teise versiooni protokolli aegumise kohta. 15. juulil 2021 kustutatakse teise versiooni protokolli tugi koodibaasist ja 15. oktoobril 2021 v\u00e4ljastatakse uus stabiilne Tor-i v\u00e4ljaanne ilma vana protokolli toeta. Seega on vanade onion-teenuste omanikel teise versiooni protokollile \u00fclemiseks 16 kuud, mis n\u00f5uab teenuse jaoks uue 56-m\u00e4rgilise aadressi genereerimist.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 \u0438 4.4.2-alpha), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Tor. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-15572), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 tor. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u043a\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 NSS (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Tor \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u0441 OpenSSL, \u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-88071","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tor 0.3.5.11, 0.4.2.8 ja 0.4.3.6 versioonide uuendus DoS-haavatavuse k\u00f5rvaldamisega | ProHoster","description":"Esitatud parandavad v\u00e4ljaanded Tor-i t\u00f6\u00f6riistakomplekti (0.3.5.11, 0.4.2.8, 0.4.3.6 ja 4.4.2-alpha), mida kasutatakse korraldamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Tor 0.3.5.11, 0.4.2.8 \u0438 0.4.3.6 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 \u0438 4.4.2-alpha), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-11T23:43:42+00:00","article:modified_time":"2020-07-11T23:43:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"88071","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:37:28","updated":"2022-09-27 15:52:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/88071","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=88071"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/88071\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=88071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=88071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=88071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}