{"id":88071,"date":"2020-07-12T01:43:42","date_gmt":"2020-07-11T23:43:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti"},"modified":"2020-07-12T01:43:42","modified_gmt":"2020-07-11T23:43:42","slug":"obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","title":{"rendered":"Tor 0.3.5.11, 0.4.2.8 ja 0.4.3.6 uuendamine DoS-haavatavuse k\u00f5rvaldamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Esitatud<\/a><\/noindex> Tor t\u00f6\u00f6riistade (0.3.5.11, 0.4.2.8, 0.4.3.6 ja 4.4.2-alpha) uuendatud versioonid, mida kasutatakse Tor anon\u00fc\u00fcmse v\u00f5rgu t\u00f6\u00f6 korraldamiseks. Uutes versioonides on k\u00f5rvaldatud haavatavus<\/a><\/noindex> (CVE-2020-15572), mis majandatakse m\u00e4lu ala, mis on v\u00e4ljaspool eraldatud puhversuunat. Haavatavus v\u00f5imaldab eemalt r\u00fcndajal algatada tor-protsessi kokkuvarisemise. Probleem ilmneb ainult siis, kui on kasutada NSS teeki (vaikimisi on Tor koostatud OpenSSL-iga ja NSS kasutamine n\u00f5uab lipu «—enable-nss» m\u00e4\u00e4ramist).<\/p>\n

Lisaks esitatud<\/a><\/noindex> plaan l\u00f5petada teise versiooni protokolli toetamine onion-teenustes (varem tuntud kui peidetud teenused). 1,5 aastat tagasi versioonis 0.3.2.9 said kasutajad pakutakse<\/a><\/noindex> kolmanda versiooni protokolli onion-teenustes, mis on silmapaistev 56-m\u00e4rgiseks aadresside \u00fclemineku, parema kaitse kaudu andmelekkete direktoriteenuses, laiendatava modulaarse struktuuri ning SHA3, ed25519 ja curve25519 algoritmide kasutamisega SHA1, DH ja RSA-1024 asemel. <\/p>\n

Teine versioon protokollist t\u00f6\u00f6tati v\u00e4lja umbes 15 aastat tagasi ja t\u00e4nap\u00e4eva n\u00f5udmiste t\u00f5ttu vananenud algoritmide t\u00f5ttu ei saa seda pidada turvaliseks. Arvestades vanade harude toe l\u00f5ppemist toetab t\u00e4nap\u00e4eval iga asjakohane Tor \u00fcleminek kolmandale versioonile protokollist, mis on vaikimisi pakutud uute onion-teenuste loomisel. <\/p>\n

15. septembril 2020 hakkab Tor v\u00e4ljastama hoiatust operaatoritele ja klientidele teise versiooniga protokolli vananemise kohta. 15. juulil 2021 eemaldatakse teise versiooni protokolli tugi koodibaasist ja 15. oktoobril 2021 ilmub uus stabiilne Tor versioon, millel pole toetust vana protokolli jaoks. Seega on vanade onion-teenuste omanikel aega 16 kuud, et \u00fcleminekuks uuele protokolliversioonile, mis n\u00f5uab teenuse jaoks uue 56-m\u00e4rgiseks aadressi genereerimist.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 \u0438 4.4.2-alpha), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Tor. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-15572), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 tor. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u043a\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 NSS (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Tor \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u0441 OpenSSL, \u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-88071","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Tor 0.3.5.11, 0.4.2.8 ja 0.4.3.6 uuendus koos DoS-haavatavuse k\u00f5rvaldamisega | ProHoster","description":"Esitletakse Tori t\u00f6\u00f6riistade parandatud versioone (0.3.5.11, 0.4.2.8, 0.4.3.6 ja 4.4.2-alpha), mida kasutatakse korraldamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Tor 0.3.5.11, 0.4.2.8 \u0438 0.4.3.6 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 \u0438 4.4.2-alpha), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-11T23:43:42+00:00","article:modified_time":"2020-07-11T23:43:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"88071","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:37:28","updated":"2022-09-27 15:52:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/88071","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=88071"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/88071\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=88071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=88071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=88071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}