انتشار وصله امنیتی برای آسیبپذیری از راه دور خرابی حافظه در OpenSSL

????? ???? ?? ???????? OpenSSL ?? ?? ?????????? ???? ????? ??? ??? ?? ????????? ????? ???? ???.
??? ???? ?? OpenSSL ???? ????? ??????? ??? ???[?] ?? ?? ?? ???? ???? ????? ?? ? ????????? x64 ?? ?? ?????? ?????????? AVX-512 ??? ????? ???? ??????[?]. OpenSSL 1.1.1 ? ?????? ???????? OpenSSL BoringSSL ? LibreSSL ??? ????? ???? ?????????.
Guido Vranken? ???? ??????? ?? ??? ??? ?? ?? ????? ??? ?? ???? ????? ???? ???[?] ?? “???????? ?????? ???????????? ???? ?? ????? ????? ???.” ????? ??? ??? ?????[?] ??? ???? ??? ???? ??? ??????? ?? ????? ???? ?????? ???.
OpenSSL ?? ???????? ???????? ????? ??? ?? ????? ??????? ?????? ????? ???? ???????? (TLS) ?? ????? ??????[?]. Advanced Vector Extensions (AVX) ???????? ?????? ?????? ??????? x86 ???? ??????????????? Intel ? AMD ?????[?].
Tomáš Mráz ?? ????? OpenSSL ?? ?? ????? GitHub ???: “?? ??? ??????? ??? ?? ?????????? ?????? ????.” ??? ??? ?? ????? ??? ??? ?? ???? ?????? ???? ????? ?? ?????????? ????? ?????? AVX-512 ??????? ??????? ????.»
?? ??? ????? Alex Gaynor ???????? ???: “????? ????? ????? ?? ????? ??? ?? ?????????? ?????? ????. ??? ?? ????? ???? ??????? ??? ?? ???? ??????? ????? ??????? RSA ???? ??????? ?? ???????? ???????? ?? ????????? ??? ??? ????? ????? (????? ?? TLS handshake).”
Xi Ruoyao? ?? ??????? ???????? ???? ?? ??????? ??????? ????? ??? ?? ????? “?? ??? ?????? ?? ????? ?? ??? ?? ???????? “?????????? ??????” ??????????? ????? ??? ????? ?????? ????? ????? ?? ???? ??? ???????? (?? ????? ???? ???) ???? ??????????? ???? ????.” ???? ??? ?? ???? ?? ???? ????? ???? ????? ?? ???? ??? ????? ???.
[?] https://github.com/openssl/openssl/releases/tag/openssl-3.0.4
[?] https://en.wikipedia.org/wiki/AVX-512
[?] https://guidovranken.com/2022/06/27/notes-on-openssl-remote-memory-corruption
[?] https://github.com/openssl/openssl/pull/18626/commits/71ad6a8da3e39bd4caf5c6c767287ddd9bce8bae
[?] https://en.wikipedia.org/wiki/Transport_Layer_Security
[?] https://github.com/openssl/openssl/issues/18625%20en.wikipedia.org/wiki/Advanced_Vector_Extensions
[?] https://thehackernews.com/2022/06/openssh-to-release-security-patch-for.html





