{"id":88071,"date":"2020-07-12T01:43:42","date_gmt":"2020-07-11T23:43:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti"},"modified":"2020-07-12T01:43:42","modified_gmt":"2020-07-11T23:43:42","slug":"obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","title":{"rendered":"Aktualizacja Tor 0.3.5.11, 0.4.2.8 i 0.4.3.6 eliminuj\u0105ca luk\u0119 DoS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Przedstawiono<\/a><\/noindex> Poprawki narz\u0119dzi Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 i 4.4.2-alpha), u\u017cywanych do organizacji pracy anonimowej sieci Tor. W nowych wersjach usuni\u0119to luka<\/a><\/noindex> (CVE-2020-15572), spowodowane dost\u0119pem do obszaru pami\u0119ci poza granicami przydzielonego bufora. Ta podatno\u015b\u0107 pozwala zdalnemu napastnikowi na zainicjowanie awarii procesu tor. Problem wyst\u0119puje tylko przy kompilacji z bibliotek\u0105 NSS (domy\u015blnie Tor jest kompilowany z OpenSSL, a u\u017cycie NSS wymaga podania flagi «—enable-nss»).<\/p>\n

Dodatkowo zaprezentowano<\/a><\/noindex> plan zaprzestania wsparcia dla drugiej wersji protoko\u0142u onion us\u0142ug (wcze\u015bniej nazywanych ukrytymi us\u0142ugami). P\u00f3\u0142tora roku temu w wydaniu 0.3.2.9 u\u017cytkownicy zostali zaproponowana<\/a><\/noindex> trzeciej wersji protoko\u0142u dla us\u0142ug onion, kt\u00f3ra wyr\u00f3\u017cnia si\u0119 przej\u015bciem na 56-znakowe adresy, lepsz\u0105 ochron\u0105 przed wyciekiem danych przez serwery katalogowe, rozszerzaln\u0105 modu\u0142ow\u0105 struktur\u0105 oraz wykorzystaniem algorytm\u00f3w SHA3, ed25519 i curve25519 zamiast SHA1, DH i RSA-1024. <\/p>\n

Druga wersja protoko\u0142u zosta\u0142a opracowana oko\u0142o 15 lat temu i ze wzgl\u0119du na stosowanie przestarza\u0142ych algorytm\u00f3w w dzisiejszych warunkach nie mo\u017ce by\u0107 uznawana za bezpieczn\u0105. Bior\u0105c pod uwag\u0119 zako\u0144czenie wsparcia dla starych ga\u0142\u0119zi, obecnie jakikolwiek aktualny bramka Tor obs\u0142uguje trzeci\u0105 wersj\u0119 protoko\u0142u, kt\u00f3ra jest proponowana domy\u015blnie przy tworzeniu nowych us\u0142ug onion. <\/p>\n

15 wrze\u015bnia 2020 roku Tor zacznie informowa\u0107 operator\u00f3w i klient\u00f3w o przestarza\u0142ej drugiej wersji protoko\u0142u. 15 lipca 2021 roku wsparcie dla drugiej wersji protoko\u0142u zostanie usuni\u0119te z bazy kodu, a 15 pa\u017adziernika 2021 roku zostanie wydana nowa stabilna wersja Tor bez wsparcia dla starego protoko\u0142u. W ten spos\u00f3b w\u0142a\u015bciciele starych us\u0142ug onion maj\u0105 16 miesi\u0119cy na przej\u015bcie na now\u0105 wersj\u0119 protoko\u0142u, kt\u00f3ry wymaga wygenerowania nowego 56-znakowego adresu dla us\u0142ugi.<\/p>\n

<\/a><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 \u0438 4.4.2-alpha), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Tor. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-15572), \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435\u043c \u043a \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 tor. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0441\u0431\u043e\u0440\u043a\u0435 \u0441 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439 NSS (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Tor \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u0441 OpenSSL, \u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-88071","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aktualizacja Tor 0.3.5.11, 0.4.2.8 i 0.4.3.6 usuwaj\u0105ca luk\u0119 DoS | ProHoster","description":"Przedstawiono poprawki narz\u0119dzi Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 i 4.4.2-alpha), kt\u00f3re s\u0105 u\u017cywane do organizacji.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Tor 0.3.5.11, 0.4.2.8 \u0438 0.4.3.6 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f Tor (0.3.5.11, 0.4.2.8, 0.4.3.6 \u0438 4.4.2-alpha), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/obnovlenie-tor-0-3-5-11-0-4-2-8-i-0-4-3-6-s-ustraneniem-dos-uyazvimosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-11T23:43:42+00:00","article:modified_time":"2020-07-11T23:43:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"88071","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:37:28","updated":"2022-09-27 15:52:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/88071","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=88071"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/88071\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=88071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=88071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=88071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}