Whakahoutanga OpenWrt 19.07.1 me te tango i te whakaraeraetanga whakaraeraetanga whakaraerae

Kua whakaputaina nga putanga whakatika o te tohatoha OpenWrt 18.06.7 и 19.07.1, ka whakakorehia whakaraeraetanga kino (CVE-2020-7982) i roto i te kaiwhakahaere kete opkg, ka taea e koe te kawe i te whakaeke MITM me te whakakapi i nga ihirangi o te kete i tangohia mai i te putunga. Na te hapa i roto i te waehere whakamana arowhai, ka taea e te kaitukino te hanga tikanga e kore ai e arohia nga haki a SHA-256 kei roto i te tohu paatete kua hainatia mamati, e taea ai te karo i nga tikanga mo te tirotiro i te pono o nga rauemi ipk kua tangohia.

Kua puta te raruraru mai i te Hui-tanguru 2017, i muri mai tāpiri waehere ki te wareware i nga waahi matua i mua i te arowhai. Na te hapa i te wa e mokowhiti ana i nga waahi, kaore i nekehia te tohu tohu ki te tuunga o te raina, ka whakahoki tonu te porowhita o te SHA-256 hexadecimal sequence wetewaehere i te mana me te whakahoki i te kaute o te kore roa.

I te mea kua whakarewahia te kaiwhakahaere kete opkg i OpenWrt me nga mana pakiaka, mena ka whakaekehia e te MITM, ka taea e te kaiwhaiwhai te whakarereke marie ki te kete ipk i tangohia mai i te putunga i te wa e whakahaere ana te kaiwhakamahi i te whakahau "opkg install", me te whakarite i te te whakatinanatanga o tana waehere me nga mana pakiaka ma te taapiri i a koe ake tuhinga kaihautu ki te kete, ka karangahia i te wa o te whakaurunga. Hei whakamahi i te whakaraeraetanga, me whakarite ano te kaitukino mo te whakakapi i te taurangi mokihi tika me te hainatanga (hei tauira, mai i downloads.openwrt.org). Me ōrite te rahi o te mōkihi kua whakarerekētia ki te rahi taketake kua tautuhia ki te taupū.

I roto i tetahi ahuatanga e hiahia ana koe ki te mahi me te kore e whakahou i te katoa o te firmware, ka taea e koe te whakahou i te kaiwhakahaere kete opkg anake ma te whakahaere i nga whakahau e whai ake nei:

cd / tmp
whakahou opkg
opkg tiki opkg
zcat ./opkg-lists/openwrt_base | grep -A10 "Pake: opkg" | grep SHA256sum
sha256sum ./opkg_2020-01-25-c09fe209-1_*.ipk

Whai muri, whakatairitehia nga moni arowhai kua whakaatuhia, a, ki te rite, mahia:

opkg install ./opkg_2020-01-25-c09fe209-1_*.ipk

Ko nga putanga hou ka whakakore i tetahi atu whakaraeraetanga i te whare pukapuka pouaka pouaka, tera pea ka puta te puhake parepare ina tukatukahia i roto i tetahi mahi blobmsg_format_json i whakahōputu motuhake i te raraunga rua, JSON ranei. Ka whakamahia te whare pukapuka ki nga waahanga tohatoha penei i te netifd, procd, ubus, rpcd me uhttpd, tae atu ki te kete. aue (I haere ki te sysUpgrade CLI). Ka puhake te puhera ina tukuna nga huanga tau nui o te momo "rua" ki roto i nga poraka pupuhi. Ka taea e koe te tirotiro i te whakaraeraetanga o to punaha ki nga whakaraeraetanga ma te whakahaere i te whakahau:

$ubus karanga luci getFeatures\
'{ "banik": 00192200197600198000198100200400.1922 }'

I tua atu i te whakakore i nga whakaraerae me te whakatika i nga hapa kua kohia, ko te tuku OpenWrt 19.07.1 i whakahou ano i te putanga o te kernel Linux (mai i te 4.14.162 ki te 4.14.167), i whakatau i nga take mahi i te wa e whakamahi ana i nga waahanga 5GHz, me te whakapai ake i te tautoko mo Ubiquiti Rocket M Titanium, Netgear WN2500RP v1 taputapu,
Zyxel NSA325, Netgear WNR3500 V2, Archer C6 v2, Ubiquiti EdgeRouter-X, Archer C20 v4, Archer C50 v4 Archer MR200, TL-WA801ND v5, HiWiFi HC5962, Xiaomi Mi Router 3 Pro me Netgear R6350.

Source: opennet.ru