Tor Browser 9.0.7 ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ

ืื•ื™ืฃ 23 ืžืขืจืฅ 2020, ื“ื™ Tor Project ื‘ืืคืจื™ื™ื˜ ืึท ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืฆื• Tor Browser ืฆื• ื•ื•ืขืจืกื™ืข 9.0.7, ื•ื•ืึธืก ืคื™ืงืกื™ื– ื–ื™ื›ืขืจื”ื™ื™ื˜ ื™ืฉื•ื– ืื™ืŸ ื“ื™ Tor ืจืึทื•ื˜ืขืจ ืื•ืŸ ื‘ืื˜ื™ื™ื˜ื™ืง ืขื ื“ืขืจื•ื ื’ืขืŸ ื“ืขื ื‘ืœืขื˜ืขืจืขืจ ืก ื ืึทื˜ื•ืจ ื•ื•ืขืŸ ื˜ืฉื•ื–ื™ื ื’ ื“ื™ ืžืขืจืกื˜ ื–ื™ื›ืขืจ (ืกื™ื™ืคืึทืกื˜) ืกืขื˜ื˜ื™ื ื’ืก ืžื“ืจื’ื”.

ื“ื™ ืžืขืจืกื˜ ื–ื™ื›ืขืจ ืžื“ืจื’ื” ืžื™ื˜ืœ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืื™ื– ืคืึทืจืงืจื™ืคึผืœื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืคึฟืึทืจ ืึทืœืข ื–ื™ื™ื˜ืœืขืš. ืึธื‘ืขืจ, ืจืขื›ื˜ ืฆื• ืึทืŸ ืึทืจื•ื™ืกื’ืขื‘ืŸ ืื™ืŸ ื“ื™ NoScript ืึทื“ื™ืฉืึทืŸ, ื“ื™ ื‘ืึทื’ืจืขื ืขืฆื•ื ื’ ืงืขื ืขืŸ ืื™ืฆื˜ ื–ื™ื™ืŸ ื‘ื™ื™ืคึผืึทืกื˜. ื•ื•ื™ ืึท ื•ื•ืึธืจืงืึทืจืึธื•ื ื“, ื“ื™ Tor Browser ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื”ืึธื‘ืŸ ื’ืขืžืื›ื˜ ืขืก ืื•ืžืžืขื’ืœืขืš ืคึฟืึทืจ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืฆื• ืœื•ื™ืคืŸ ื•ื•ืขืŸ ืฉื˜ืขืœืŸ ืฆื• ื“ื™ ื”ืขื›ืกื˜ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื“ืจื’ื”.

ื“ืึธืก ืงืขืŸ ื‘ืจืขื›ืŸ ื“ื™ Tor Browser ื“ืขืจืคืึทืจื•ื ื’ ืคึฟืึทืจ ืึทืœืข ื™ื•ื–ืขืจื– ืžื™ื˜ ื“ื™ ื”ืขื›ืกื˜ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžืึธื“ืข ืขื ื™ื™ื‘ืึทืœื“, ื•ื•ื™ื™ึทืœ ืขืก ืื™ื– ื ื™ื˜ ืžืขืจ ืžืขื’ืœืขืš ืฆื• ื’ืขื‘ืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ื“ื•ืจืš ื“ื™ NoScript ืกืขื˜ื˜ื™ื ื’ืก.

ืื•ื™ื‘ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืฆื•ืจื™ืงืงื•ืžืขืŸ ื“ื™ ืคืจื™ืขืจื“ื™ืงืข ื‘ืœืขื˜ืขืจืขืจ ื ืึทื˜ื•ืจ, ืœืคึผื—ื•ืช ื˜ืขืžืคึผืขืจืขืจืึทืœื™, ืื™ืจ ืงืขื ืขืŸ ื˜ืึธืŸ ื“ืึธืก ืžืึทื ื™ื•ืึทืœื™, ื•ื•ื™ ื’ื™ื™ื˜:

  1. ืขืคึฟืขื ืขืŸ ืึท ื ื™ื™ึทืข ืงื•ื•ื™ื˜ืœ.
  2. ื˜ื™ืคึผ ื•ื•ืขื’ืŸ: ืงืึธื ืคื™ื’ ืื™ืŸ ื“ื™ ืึทื“ืจืขืก ื‘ืึทืจ ืื•ืŸ ื“ืจื™ืงืŸ ืึทืจื™ื™ึทืŸ.
  3. ืื™ืŸ ื“ื™ ื–ื•ื›ืŸ ื‘ืึทืจ ืื•ื ื˜ืขืจ ื“ื™ ืึทื“ืจืขืก ื‘ืึทืจ ืึทืจื™ื™ึทืŸ: javascript.enabled
  4. ื˜ืึธืคึผืœ-ื’ื™ื˜ ืื•ื™ืฃ ื“ื™ ืจื•ืขืŸ ืฉื•ืจื”, ื“ื™ "ื•ื•ืขืจื˜" ืคืขืœื“ ื–ืึธืœ ื˜ื•ื™ืฉืŸ ืคื•ืŸ ืคืึทืœืฉ ืฆื• ืืžืช

ื“ื™ ื’ืขื‘ื•ื™ื˜-ืื™ืŸ Tor ื ืขืฅ ืจืึทื•ื˜ืขืจ ืื™ื– ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืฆื• ื•ื•ืขืจืกื™ืข 0.4.2.7. ื“ื™ ืคืืœื’ืขื ื“ืข ื—ืกืจื•ื ื•ืช ื–ืขื ืขืŸ ืงืขืจืขืงื˜ืึทื“ ืื™ืŸ ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข:

  1. ืคืึทืจืคืขืกื˜ื™ืงื˜ ืึท ื–ืฉื•ืง (CVE-2020-10592) ื•ื•ืึธืก ื“ืขืจืœื•ื™ื‘ื˜ ื•ื•ืขืจ ืขืก ื™ื– ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืึท ื“ืึธืก ื‘ืึทืคืึทืœืŸ ืื•ื™ืฃ ืึท ืจืขืœืข ืึธื“ืขืจ ื•ื•ืึธืจืฆืœ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืกืขืจื•ื•ืขืจ, ืงืึธื–ื™ื ื’ ืงืคึผื• ืึธื•ื•ืขืจืœืึธืึทื“, ืึธื“ืขืจ ืึท ื‘ืึทืคืึทืœืŸ ืคื•ืŸ ื“ื™ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืกืขืจื•ื•ืขืจืก ื–ื™ืš (ื ื™ื˜ ื ืึธืจ ื•ื•ืึธืจืฆืœ ืึธื ืขืก), ืงืึธื–ื™ื ื’ ืงืคึผื• ืึธื•ื•ืขืจืœืึธืึทื“ ืคึฟืึทืจ ืคึผืจืึธืกื˜ ื ืขืฅ ื ื™ืฆืขืจืก.
    ื˜ืึทืจื’ืขื˜ืขื“ ืงืคึผื• ืึธื•ื•ืขืจืœืึธืึทื“ ืงืขืŸ ื“ืึธืš ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ืงืึทื˜ืขืจ ื˜ื™ื™ืžื™ื ื’ ืื ืคืืœืŸ, ื”ืขืœืคึผื™ื ื’ ืฆื• ื“ืข-ืึทื ืึทื ื™ืžื™ื™ื– ื™ื•ื–ืขืจื– ืึธื“ืขืจ ืคืึทืจื‘ืึธืจื’ืŸ ื‘ืึทื“ื™ื ื•ื ื’ืก.
  2. ืคืึทืจืคืขืกื˜ื™ืงื˜ CVE-2020-10593, ื•ื•ืึธืก ืงืขืŸ ืคืึทืจืฉืึทืคืŸ ืึท ื•ื•ื™ื™ึทื˜ ื–ื›ึผืจื•ืŸ ืจื™ื ืขืŸ ื•ื•ืึธืก ืงืขืŸ ืคื™ืจืŸ ืฆื• ืจื™ื™ื•ื– ืคื•ืŸ ืึท ืึทื•ื˜ื“ื™ื™ื˜ื™ื“ ืงื™ื™ื˜
  3. ืื ื“ืขืจืข ืขืจืจืึธืจืก ืื•ืŸ ืึธื•ืžื™ืฉืึทื ื–

ืžืงื•ืจ: linux.org.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’