ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืื™ื ื˜ืขืจื ืขื˜ ื ื™ื™ึทืขืก > ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ Tor 0.3.5.10, 0.4.1.9 ืื•ืŸ 0.4.2.7 ืžื™ื˜ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืึธืก ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™

ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ Tor 0.3.5.10, 0.4.1.9 ืื•ืŸ 0.4.2.7 ืžื™ื˜ ื™ืœื™ืžืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืึธืก ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™

ื“ืขืจืœืื ื’ื˜ ืงืขืจืขืงื˜ื™ื•ื• ืจื™ืœื™ืกื™ื– ืคื•ืŸ ื“ื™ ื˜ืึธืจ ืžื›ืฉื™ืจื™ื (0.3.5.10, 0.4.1.9, 0.4.2.7, 0.4.3.3-ืึทืœืฃ), ื’ืขื ื™ืฆื˜ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™ ืึทืจื‘ืขื˜ ืคื•ืŸ ื“ื™ ืึทื ืึทื ืึทืžืึทืก ื˜ืึธืจ ื ืขืฅ. ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืขืก ืคืึทืจืจื™ื›ื˜ืŸ ืฆื•ื•ื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–:

  • CVE-2020-10592 - ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื“ื•ืจืš ืงื™ื™ืŸ ืึทื˜ืึทืงืขืจ ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ืึท ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜ ืฆื• ืจื™ืœื™ื™ื–. ื“ื™ ื‘ืึทืคืึทืœืŸ ืงืขื ืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ื“ื•ืจืš Tor Directory ืกืขืจื•ื•ืขืจืก ืฆื• ื‘ืึทืคืึทืœืŸ ืงืœื™ื™ืึทื ืฅ ืื•ืŸ ืคืึทืจื‘ืึธืจื’ืŸ ื‘ืึทื“ื™ื ื•ื ื’ืก. ืึท ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ืžืึทื›ืŸ ื˜ื ืึธื™ื ื•ื•ืึธืก ืคื™ืจืŸ ืฆื• ืฆื• ืคื™ืœ ืžืึทืกืข ืื•ื™ืฃ ื“ื™ ืงืคึผื•, ื“ื™ืกืจืึทืคึผื˜ื™ื ื’ ื ืึธืจืžืึทืœ ืึธืคึผืขืจืึทืฆื™ืข ืคึฟืึทืจ ืขื˜ืœืขื›ืข ืกืขืงื•ื ื“ืขืก ืึธื“ืขืจ ืžื™ื ื•ื˜ (ื“ื•ืจืš ืจื™ืคึผื™ื˜ื™ื ื’ ื“ื™ ื‘ืึทืคืึทืœืŸ, ื“ื™ ื“ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืขืงืกื˜ืขื ื“ืขื“ ืคึฟืึทืจ ืึท ืœืึทื ื’ ืฆื™ื™ึทื˜). ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืืจื•ื™ืก ื–ื™ื ื˜ ืžืขืœื“ื•ื ื’ 0.2.1.5-ืึทืœืฃ.
  • CVE-2020-10593 - ืึท ืจื™ืžืึธื•ื˜ืœื™ ื™ื ื™ืฉื™ื™ื™ื˜ื™ื“ ื–ื›ึผืจื•ืŸ ืจื™ื ืขืŸ ื•ื•ืึธืก ืึทืงืขืจื– ื•ื•ืขืŸ ืงืจื™ื™ึทื– ื•ื•ืึทื˜ืŸ ืื™ื– ื˜ืึธืคึผืœ-ืžืึทื˜ืฉื˜ ืคึฟืึทืจ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืงื™ื™ื˜.

ืขืก ืงืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ืื ื’ืขื•ื•ื™ื–ืŸ ืึทื– ืื™ืŸ Tor Browser 9.0.6 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ืึทื“ื™ืฉืึทืŸ ื‘ืœื™ื™ื‘ื˜ ืึทื ืคื™ืงืกื˜ NoScript, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืœื•ื™ืคืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืงืึธื“ ืื™ืŸ ื“ื™ ืกื™ื™ืคืึทืกื˜ ืฉื•ืฅ ืžืึธื“ืข. ืคึฟืึทืจ ื™ืขื ืข ืคึฟืึทืจ ื•ื•ืึธืก ืคืึทืจื•ื•ืขืจืŸ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืื™ื– ื•ื•ื™ื›ื˜ื™ืง, ืขืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ื˜ืขืžืคึผืขืจืขืจืึทืœื™ ื“ื™ืกื™ื™ื‘ืึทืœ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืื™ืŸ ื“ืขื ื‘ืœืขื˜ืขืจืขืจ ืื™ืŸ about:config ื“ื•ืจืš ื˜ืฉืึทื ื’ื™ื ื’ ื“ื™ javascript.enabled ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ืŸ about:config.

ื–ื™ื™ ื’ืขืคืจื•ื•ื•ื˜ ืฆื• ืขืœื™ืžื™ื ื™ืจืŸ ื“ืขื ื›ื™ืกืึธืจืŸ ืื™ืŸ NoScript 11.0.17, ืึธื‘ืขืจ ื•ื•ื™ ืขืก ืคืืจืงืขืจื˜ ืื•ื™ืก, ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ืคืึทืจืจื™ื›ื˜ืŸ ื˜ื•ื˜ ื ื™ืฉื˜ ื’ืึธืจ ืกืึธืœื•ื•ืข ื“ื™ ืคึผืจืึธื‘ืœืขื. ืื•ื™ื‘ ืžืฉืคื˜ืŸ ืœื•ื™ื˜ ื“ื™ ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื‘ืืคืจื™ื™ื˜ ืžืขืœื“ื•ื ื’ NoScript 11.0.18, ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ืื•ื™ืš ื ื™ืฉื˜ ืกืึทืœื•ื•ื“. Tor Browser ื›ื•ืœืœ ืึธื˜ืึทืžืึทื˜ื™ืง ื ืึธืกืงืจื™ืคึผื˜ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ, ืึทื–ื•ื™ ืึทืžืึธืœ ืึท ืคืึทืจืจื™ื›ื˜ืŸ ืื™ื– ื‘ื ื™ืžืฆื, ืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืื™ื‘ืขืจื’ืขื’ืขื‘ืŸ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’