ืคึผืจืึธื”ืึธืกื˜ืขืจ > ื‘ืœืึธื’ > ืื™ื ื˜ืขืจื ืขื˜ ื ื™ื™ึทืขืก > OpenWrt 19.07.1 ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืžื™ื˜ ื‘ืึทื–ื™ื™ึทื˜ื™ืงื•ื ื’ ืคื•ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืคื•ืŸ ืคึผืขืงืœ ืกืคึผืึธืึธืคื™ื ื’

OpenWrt 19.07.1 ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืžื™ื˜ ื‘ืึทื–ื™ื™ึทื˜ื™ืงื•ื ื’ ืคื•ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืคื•ืŸ ืคึผืขืงืœ ืกืคึผืึธืึธืคื™ื ื’

ืงืขืจืขืงื˜ื™ื•ื• ืจื™ืœื™ืกื™ื– ืคื•ืŸ ื“ื™ OpenWrt ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ื–ืขื ืขืŸ ืืจื•ื™ืก 18.06.7 ะธ 19.07.1, ืื™ืŸ ื•ื•ืขืœื›ืข ืขืก ืื™ื– ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ื’ืขืคืขืจืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2020-7982) ืื™ืŸ ื“ื™ ืคึผืขืงืœ ืคืึทืจื•ื•ืึทืœื˜ืขืจ opkg, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืึท MITM ื‘ืึทืคืึทืœืŸ ืื•ืŸ ืคืึทืจื‘ื™ื™ึทื˜ืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ืึท ืคึผืขืงืœ ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ืคื•ืŸ ื“ื™ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™. ืจืขื›ื˜ ืฆื• ืึท ื˜ืขื•ืช ืื™ืŸ ื“ื™ ื˜ืฉืขืงืงืกื•ื ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืงืึธื“, ืึท ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ืžืึทื›ืŸ ื˜ื ืึธื™ื ืื•ื ื˜ืขืจ ื•ื•ืึธืก ื“ื™ SHA-256 ื˜ืฉืขืงืงืกืึทืžื– ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื“ื™ ื“ื™ื’ื™ื˜ืึทืœ ื’ืขื—ืชืžืขื˜ ืคึผืึทืงืึทื˜ ืื™ื ื“ืขืงืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืื™ื’ื ืึธืจื™ืจื˜, ื•ื•ืึธืก ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ื‘ื™ื™ืคึผืึทืก ืžืขืงืึทื ื™ื–ืึทืžื– ืคึฟืึทืจ ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’ ื“ื™ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืคื•ืŸ ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ื™ืคึผืง ืจืขืกื•ืจืกืŸ.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืืจื•ื™ืก ื–ื™ื ื˜ ืคืขื‘ืจื•ืืจ 2017, ื ืึธืš ืึทื“ื™ืฉืึทื ื– ืงืึธื“ ืฆื• ืื™ื’ื ืึธืจื™ืจืŸ ืœื™ื“ื™ื ื’ ืกืคึผื™ื™ืกืึทื– ืื™ื™ื“ืขืจ ื“ื™ ื˜ืฉืขืงืงืกื•ื. ืจืขื›ื˜ ืฆื• ืึท ื˜ืขื•ืช ื•ื•ืขืŸ ืกืงื™ืคึผื™ื ื’ ืกืคึผื™ื™ืกืึทื–, ื“ืขืจ ื˜ื™ื™ึทื˜ืœ ืฆื• ื“ื™ ืฉื˜ืขืœืข ืื™ืŸ ื“ื™ ืฉื•ืจื” ืื™ื– ื ื™ืฉื˜ ืฉื™ืคื˜ื™ื“ ืื•ืŸ ื“ื™ SHA-256 ื”ืขืงืกืึทื“ืขืกื™ืžืึทืœ ืกื™ืงื•ื•ืึทื ืก ื“ื™ืงืึธื•ื“ื™ื ื’ ืฉืœื™ื™ืฃ ื’ืœื™ื™ืš ืื•ืžื’ืขืงืขืจื˜ ืงืึธื ื˜ืจืึธืœ ืื•ืŸ ืื•ืžื’ืขืงืขืจื˜ ืึท ื˜ืฉืขืงืงืกื•ื ืคื•ืŸ ื ื•ืœ ืœืขื ื’.

ื–ื™ื ื˜ ื“ื™ ืึธืคึผืงื’ ืคึผืขืงืœ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ืื™ืŸ OpenWrt ืื™ื– ืœืึธื ื˜ืฉื˜ ืžื™ื˜ ื•ื•ืึธืจืฆืœ ืจืขื›ื˜, ืื™ืŸ ื“ื™ ื’ืขืฉืขืขื ื™ืฉ ืคื•ืŸ ืึท MITM ื‘ืึทืคืึทืœืŸ, ืึท ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ืฉื˜ื™ืœ ืžืึทื›ืŸ ืขื ื“ืขืจื•ื ื’ืขืŸ ืฆื• ื“ื™ ื™ืคึผืง ืคึผืขืงืœ ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ืคื•ืŸ ื“ื™ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ื‘ืฉืขืช ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ืื™ื– ืขืงืกืึทืงื™ื•ื˜ื™ื ื’ ื“ื™ "ืึธืคึผืงื’ ื™ื ืกื˜ืึทืœื™ืจืŸ" ื‘ืึทืคึฟืขืœ, ืื•ืŸ ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™. ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ื–ื™ื™ืŸ ืงืึธื“ ืžื™ื˜ ื•ื•ืึธืจืฆืœ ืจืขื›ื˜ ื“ื•ืจืš ืึทื“ื™ื ื’ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข ื”ืึทื ื“ืœืขืจ ืกืงืจื™ืคึผืก ืฆื• ื“ืขื ืคึผืขืงืœ, ื’ืขืจื•ืคืŸ ื‘ืขืฉืึทืก ื™ื ืกื˜ืึทืœื™ืจื•ื ื’. ืฆื• ื’ื•ื•ื•ืจืข ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ื“ืขืจ ืึทื˜ืึทืงืขืจ ืžื•ื–ืŸ ืื•ื™ืš ืฆื•ืœื™ื™ื’ืŸ ืคึฟืึทืจ ื“ื™ ืคืึทืจื‘ื™ื™ึทื˜ ืคื•ืŸ ืึท ืจื™ื›ื˜ื™ืง ืื•ืŸ ื’ืขื—ืชืžืขื˜ ืคึผืขืงืœ ืื™ื ื“ืขืงืก (ืœืžืฉืœ, ืฆื•ื’ืขืฉื˜ืขืœื˜ ืคึฟื•ืŸ downloads.openwrt.org). ื“ื™ ื’ืจื™ื™ืก ืคื•ืŸ ื“ืขื ืžืึทื“ืึทืคื™ื™ื“ ืคึผืขืงืœ ืžื•ื–ืŸ ื’ืœื™ื™ึทื›ืŸ ื“ื™ ืึธืจื™ื’ื™ื ืขืœ ื’ืจื™ื™ืก ื“ื™ืคื™ื™ื ื“ ืื™ืŸ ื“ื™ ืื™ื ื“ืขืงืก.

ืื™ืŸ ืึท ืกื™ื˜ื•ืึทืฆื™ืข ื•ื•ืขืŸ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ื˜ืึธืŸ ืึธืŸ ืึทืคึผื“ื™ื™ื˜ื™ื ื’ ื“ื™ ื’ืื ืฆืข ืคื™ืจืžื•ื•ืึทืจืข, ืื™ืจ ืงืขื ืขืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื‘ืœื•ื™ื– ื“ื™ ืึธืคึผkg ืคึผืขืงืœ ืคืึทืจื•ื•ืึทืœื˜ืขืจ ื“ื•ืจืš ืœื•ื™ืคืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืงืึทืžืึทื ื“ื–:

ืงื“ / ื˜ืžืคึผ
opkg ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ
opkg ืึธืคึผืœืึธื“ื™ืจืŸ opkg
zcat ./opkg-lists/openwrt_base | grep -A10 "ืคึผืึทืงืง: ืึธืคึผืงื’" | grep SHA256sum
sha256sum ./opkg_2020-01-25-c09fe209-1_*.ipk

ื•ื•ื™ื™ึทื˜ืขืจ, ืคืึทืจื’ืœื™ื™ึทื›ืŸ ื“ื™ ื’ืขื•ื•ื™ื–ืŸ ื˜ืฉืขืงืกืึทืžื– ืื•ืŸ ืื•ื™ื‘ ื–ื™ื™ ื’ืœื™ื™ึทื›ืŸ, ื•ื™ืกืคื™ืจืŸ:

opkg install ./opkg_2020-01-25-c09fe209-1_*.ipk

ื ื™ื• ื•ื•ืขืจืกื™ืขืก ืื•ื™ืš ืขืœื™ืžื™ื ื™ืจืŸ ืื™ื™ื ืขืจ ืžืขืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื‘ื™ื‘ืœื™ืื˜ืขืง ืœื™ื‘ื•ื‘ืึธืงืก, ื•ื•ืึธืก ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืึท ื‘ืึทืคืขืจ ืึธื•ื•ื•ืขืจืคืœืึธื• ื•ื•ืขืŸ ืคึผืจืึทืกืขืกื˜ ืื™ืŸ ืึท ืคึฟื•ื ืงืฆื™ืข blobmsg_format_json ืกืคึผืขืฆื™ืขืœ ืคืึธืจืžืึทื˜ื˜ืขื“ ืกื™ืจื™ืึทืœื™ื™ื–ื“ ื‘ื™ื™ื ืขืจื™ ืึธื“ืขืจ JSON ื“ืึทื˜ืŸ. ื“ื™ ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืื™ื– ื’ืขื ื™ืฆื˜ ืื™ืŸ ืึทื–ืึท ืคืึทืจืฉืคึผืจื™ื™ื˜ื•ื ื’ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ื•ื•ื™ netifd, procd, ubus, rpcd ืื•ืŸ uhttpd, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืื™ืŸ ื“ืขื ืคึผืขืงืœ. ื•ื•ืึทื• (ืึทื˜ืขื ื“ืึทื“ sysUpgrade CLI). ื ื‘ืึทืคืขืจ ืึธื•ื•ื•ืขืจืคืœืึธื• ืึทืงืขืจื– ื•ื•ืขืŸ ื’ืจื•ื™ืก ื ื•ืžืขืจื™ืง ืึทื˜ืจื™ื‘ื™ื•ืฅ ืคื•ืŸ ื“ื™ "ื˜ืึธืคึผืœ" ื˜ื™ืคึผ ื–ืขื ืขืŸ ื˜ืจืึทื ืกืžื™ื˜ื˜ืขื“ ืื™ืŸ ื‘ืœืึธื‘ ื‘ืœืึทืงืก. ืื™ืจ ืงืขื ื˜ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืคื•ืŸ ื“ื™ื™ืŸ ืกื™ืกื˜ืขื ืฆื• ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื“ื•ืจืš ืœื•ื™ืคืŸ ื“ื™ ื‘ืึทืคึฟืขืœ:

$ubus call luci getfeatures\
'{"ื‘ืึทื ืง": 00192200197600198000198100200400.1922}'

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื™ืœื™ืžืึทื ื™ื™ื˜ื™ื ื’ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื•ืŸ ืงืขืจืขืงื˜ื™ื ื’ ืึทืงื™ื•ืžื™ืึทืœื™ื™ื˜ื™ื“ ืขืจืจืึธืจืก, ื“ื™ OpenWrt 19.07.1 ืžืขืœื“ื•ื ื’ ืื•ื™ืš ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ื“ื™ ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ (ืคื•ืŸ 4.14.162 ืฆื• 4.14.167), ืกืึทืœื•ื•ื“ ืคืึธืจืฉื˜ืขืœื•ื ื’ ื™ืฉื•ื– ื•ื•ืขืŸ ื ื™ืฆืŸ 5GHz ืคืจื™ืงื•ื•ืึทื ืกื™ื–, ืื•ืŸ ื™ืžืคึผืจื•ื•ื•ื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ Ubiquiti Rocket M ื˜ื™ื˜ืึทื ื™ื•ื, Netgear WN2500RP v1 ื“ืขื•ื•ื™ืกืขืก,
Zyxel NSA325, Netgear WNR3500 V2, Archer C6 v2, Ubiquiti EdgeRouter-X, Archer C20 v4, Archer C50 v4 Archer MR200, TL-WA801ND v5, HiWiFi HC5962, Xiaomi Mi Router 3 Pro ืื•ืŸ Netgear.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’