OpenSSH imawonjezera chitetezo motsutsana ndi njira zam'mbali

Damien Miller (djm@) anawonjezera pali kusintha kwa OpenSSH komwe kuyenera kuthandizira kuteteza kumayendedwe osiyanasiyana am'mbali monga Specter, Meltdown, Chitsogozo и RAMBleed. Chitetezo chowonjezeracho chapangidwa kuti chiteteze kubwezeretsedwa kwa kiyi yachinsinsi yomwe ili mu RAM pogwiritsa ntchito kutayikira kwa data kudzera pamayendedwe a chipani chachitatu.

Chofunikira chachitetezo ndichakuti makiyi achinsinsi, akapanda kugwiritsidwa ntchito, amasungidwa pogwiritsa ntchito kiyi yofananira, yomwe imachokera ku "prekey" yayikulu yokhala ndi data yosasinthika (pakali pano kukula kwake ndi 16 KB) .
Kuchokera pamawonekedwe a kukhazikitsa, makiyi achinsinsi amasungidwa mwachinsinsi akalowetsedwa m'makumbukiro kenako amasinthidwa mowonekera akagwiritsidwa ntchito ngati siginecha kapena akasungidwa / kusanja.

Kuti ziwonjezeke bwino, owukira ayenera kubwezeretsa prekey yonse molondola kwambiri asanayese kutsitsa kiyi yachinsinsi yotetezedwa. Komabe, m'badwo waposachedwa wa ziwopsezo uli ndi vuto lochira pang'ono kotero kuti kuchuluka kwa zolakwikazi kumapangitsa kuchira koyenera kwa kiyi yogawana kale kukhala kosatheka.

Source: opennet.ru