OpenSSH inowedzera dziviriro kubva padivi-chiteshi kurwisa

Damien Miller (djm@) akawedzera pane kuvandudzwa muOpenSSH iyo inofanirwa kubatsira kudzivirira kubva kwakasiyana siyana nzira yekurwiswa senge Specter, Meltdown, RowHammer ΠΈ RAMBleed. Kudzivirirwa kwakawedzerwa kwakagadzirirwa kudzivirira kudzoreredzwa kwekiyi yakavanzika inowanikwa muRAM uchishandisa inodonha data kuburikidza nevechitatu-bato chiteshi.

Chakakosha chedziviriro ndechekuti makiyi epachivande, kana asiri mukushandiswa, akavharidzirwa achishandisa kiyi inofananidzwa, inotorwa kubva kune yakakura "prekey" ine data isina kurongeka (parizvino saizi yayo i16 KB) .
Kubva pakuona kwekuita, makiyi epachivande anovharirwa kana akaiswa mundangariro uye otomatiki uye anodhindwa pachena kana achishandiswa kusaina kana kuchengetwa / serialized.

Kurwiswa kwakabudirira, vanorwisa vanofanirwa kudzoreredza prekey yese nekurongeka kwepamusoro vasati vaedza kudhipfenyura kiyi yakachengetedzwa yakavanzika. Nekudaro, chizvarwa chazvino chekurwiswa chine chiyero chekudzoreredza chikanganiso zvekuti huwandu hwezvikanganiso izvi hunoita kuti kudzoreredzwa kwekiyi yakagoverwa kusaite.

Source: opennet.ru

Voeg