Kugadzirisa kuburitswa kweTor toolkit (0.3.5.11, 0.4.2.8, 0.4.3.6 uye 4.4.2-alpha), inoshandiswa kuronga kushanda kweTor anonymous network. Yakabviswa mushanduro itsva (CVE-2020-15572), inokonzerwa nekuwana ndangariro kunze kwemiganhu yebhafa yakagoverwa. Kusagadzikana kunobvumira anorwisa ari kure kuti akonzerese kuti tor process iparare. Dambudziko rinongoonekwa kana uchivaka neraibhurari yeNSS (nekusagadzikana, Tor inovakwa neOpenSSL, uye kushandisa NSS kunoda kutsanangura iyo "-enable-nss" mureza).
Mukuwedzera ronga kumisa rutsigiro rwechipiri vhezheni yeonion services protocol (yaimbonzi yakavanzika masevhisi). Gore nehafu rapfuura, mukuburitswa 0.3.2.9, vashandisi vaive iyo yechitatu vhezheni yeprotocol yemasevhisi ehanyanisi, inocherechedzwa pakuchinja kuenda kune 56-mavara kero, yakavimbika kuchengetedzwa kubva pakudonha kwedata kuburikidza nemaseva edhairekitori, yakawedzera modular chimiro uye kushandiswa kweSHA3, ed25519 uye curve25519 algorithms panzvimbo yeSHA1, DH uye RSA-1024.
Yechipiri vhezheni yeprotocol yakagadziridzwa anenge makore gumi nemashanu apfuura uye, nekuda kwekushandiswa kwechinyakare algorithms, haigone kunzi yakachengeteka mumamiriro emazuva ano. Tichifunga nezvekupera kwerutsigiro rwematavi ekare, parizvino chero yazvino Tor gedhi inotsigira yechitatu vhezheni yeprotocol, iyo inopihwa nekusarudzika pakugadzira mabasa matsva ehanyanisi.
Musi waGunyana 15, 2020, Tor ichatanga yambiro vashandisi nevatengi nezve kuderedzwa kweyechipiri vhezheni yeprotocol. Musi waChikunguru 15, 2021, tsigiro yeshanduro yechipiri yeprotocol ichabviswa kubva kucodebase, uye muna Gumiguru 15, 2021, kuburitswa kutsva kwakagadzikana kweTor kuchaburitswa pasina rutsigiro rweprotocol yekare. Nokudaro, varidzi vemabasa ehanyanisi ekare vane mwedzi gumi nematanhatu kuti vashandure kune imwe shanduro yeprotocol, iyo inoda kugadzira kero itsva ye16-character yebasa.
Source: opennet.ru