victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
<table>
<tr><th>ID</th><th>Issue</th><th>Description</th><th>Impact</th><th>Status</th><th>Release</th></tr>
<tr><td>TLS-003</td><td>[[!tails_ticket 19546]]</td><td>Local privilege escalation in Persistent folder activation hook</td><td>High</td><td>Fixed</td><td>5.11</td></tr>
<tr><td>TLS-004</td><td>[[!tails_ticket 19547]]</td><td>Symlink attack in Persistent folder deactivation hook</td><td>Low</td><td>Fixed</td><td>5.11</td></tr>
<tr><td>TLS-005</td><td>[[!tails_ticket 19548]]</td><td>Local privilege escalation in GnuPG feature activation hook</td><td>High</td><td>Fixed</td><td>5.11</td></tr>
</table>
<table>
<tr><th>Identificació</th><th>Problema</th><th>Descripció</th><th>Impacte</th><th>Estat</th><th>Llançament</th></tr>
<tr><td>TLS-003</td><td>[[!tails_ticket 19546]]</td><td>Escalada de privilegis locals a l'activació de carpetes persistents</td><td>Alt</td><td>Corregit</td><td>5.11</td></tr>
<tr><td>TLS-004</td><td>[[!tails_ticket 19547]]</td><td>Atac d'enllaç simbòlic a la desactivació de carpetes persistents</td><td>Baix</td><td>Corregit</td><td>5.11</td></tr>
<tr><td>TLS-005</td><td>[[!tails_ticket 19548]]</td><td>Escalada de privilegis locals a l'activació de la funció GnuPG</td><td>Alt</td><td>Corregit</td><td>5.11</td></tr>
</table>
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
<table>
<tr><th>ID</th><th>Issue</th><th>Description</th><th>Impact</th><th>Status</th><th>Release</th></tr>
<tr><td>TLS-012</td><td>[[!tails_ticket 19585]]</td><td>Leak clear IP as low-privileged user amnesia</td><td>High</td><td>Fixed</td><td>5.12</td></tr>
<tr><td>TLS-013</td><td>[[!tails_ticket 19594]]</td><td>Local privilege escalation to Tor Connection sandbox</td><td>High</td><td>Fixed</td><td>5.12</td></tr>
<tr><td>TLS-014</td><td>[[!tails_ticket 19595]]</td><td>Local privilege escalation to Tor Browser sandbox</td><td>Moderate</td><td>Fixed</td><td>5.13</td></tr>
<tr><td>TLS-017</td><td>[[!tails_ticket 19610]]</td><td>Insecure permissions of chroot overlay</td><td>Unknown</td><td>Fixed</td><td>5.13</td></tr>
</table>
<table>
<tr><th>Identificació</th><th>Problema</th><th>Descripció</th><th>Impacte</th><th>Estat</th><th>Llançament</th></tr>
<tr><td>TLS-012</td><td>[[!tails_ticket 19585]]</td><td>Filtració d'IP clara com a usuari amb privilegis baixos amnesia</td><td>Alt</td><td>Corregit</td><td>5.12</td></tr>
<tr><td>TLS-013</td><td>[[!tails_ticket 19594]]</td><td>Escalada de privilegis locals al sandbox Connexió Tor</td><td>Alt</td><td>Corregit</td><td>5.12</td></tr>
<tr><td>TLS-014</td><td>[[!tails_ticket 19595]]</td><td>Escalada de privilegis locals al sandbox del Navegador Tor</td><td>Moderat</td><td>Corregit</td><td>5.13</td></tr>
<tr><td>TLS-017</td><td>[[!tails_ticket 19610]]</td><td>Permisos insegurs de superposició chroot</td><td>Desconegut</td><td>Corregit</td><td>5.13</td></tr>
</table>
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
Tor integration
Integració Tor
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
Detailed findings
Descobriments detallats
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
Because at Tails we believe that transparency is key to building trust, all the code of our software is public and the results of this audit as well. You can find below a summary of all the issues and their fixes.
Perquè a Tails creiem que la transparència és clau per generar confiança, tot el codi del nostre programari és públic i els resultats d'aquesta auditoria també. A continuació podeu trobar un resum de tots els problemes i les seves resolucions.
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
As good as the results of this audit are, they also serve as a reminder that no software is ever 100% secure and that every release of Tails can fix critical security vulnerabilities. Your best protection against all kinds of attack is to keep your Tails up-to-date.
Per molt bons que siguin els resultats d'aquesta auditoria, també serveixen com a recordatori que cap programari és mai 100% segur i que cada llançament de Tails pot solucionar vulnerabilitats de seguretat crítiques. La vostra millor protecció contra tot tipus d'atac és mantenir el vostre Tails actualitzat.
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
We fixed all these issues as soon as possible and before making them public on our GitLab. The last issue was fixed in 5.14, 3 weeks after it was reported to us.
Hem solucionat tots aquests problemes tan aviat com hem pogut i abans de fer-los públics al nostre GitLab. L'últim problema es va solucionar a Tails 5.14, tres setmanes després que se'ns informés.
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
The auditors found 6 *High*, 1 *Moderate*, 3 *Low*-severity issues. Another issue was fixed before the actual impact was assessed and so marked as having *Unknown* severity.
Els auditors van trobar 6 problemes de gravetat *Alta*, 1 de *Moderada* i 3 de *Baixa*. Es va solucionar un altre problema abans que s'avalués l'impacte real i s'ha marcat com a de gravetat *Desconeguda*.
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
> ***Overall, the Tails operating system left a solid impression and addressed
> most of the concerns of an average user in need of anonymity.***
>
> *This is particularly evident in the isolation of various components by the
> developers. For example, the configured AppArmor rules often prevented a
> significant impact of the found vulnerabilities. Shifting to Wayland was a
> good decision, as it provides more security by isolating individual GUI
> applications.*
>
> *All in all, no serious vulnerabilities were found through the integration
> into Wayland. Unsafe Browser and Persistent Storage should now be less
> vulnerable to attack, as all vulnerabilities have been fixed.*
> ***En general, el sistema operatiu Tails ha deixat una impressió sòlida i s'aborden
> la majoria de les preocupacions d'un usuari mitjà que necessita anonimat.***
>
> *Això és especialment evident en l'aïllament de diversos components per part dels
> desenvolupadors. Per exemple, les regles d'AppArmor configurades sovint impedeixen un
> impacte significatiu de les vulnerabilitats trobades. El canvi a Wayland va ser una
> bona decisió, ja que proporciona més seguretat aïllant aplicacions GUI
> individuals.*
>
> *En conjunt, no s'han trobat vulnerabilitats greus a través de la integració
> a Wayland. El Navegador Insegur i l'Emmagatzematge Persistent ara haurien de ser menys
> vulnerables als atacs, ja que totes les vulnerabilitats s'han solucionat.*
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
We are proud of the conclusion of the auditors:
Estem orgullosos de la conclusió dels auditors:
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
To better protect our users, we addressed most of the security vulnerabilities as soon as they were discovered and reported to us, without waiting for the audit to be complete and public. We can now share with your the [final report](https://gitlab.tails.boum.org/tails/tails/uploads/df935595f41faa687805136a6bfa2910/tails-ros-penetration-test-report-1-2.pdf).
Per protegir millor els nostres usuaris, vam abordar la majoria de les vulnerabilitats de seguretat tan bon punt van ser descobertes i informades, sense esperar que l'auditoria fos completa i pública. Ara podem compartir amb vosaltres l'[informe final](https://gitlab.tails.boum.org/tails/tails/uploads/df935595f41faa687805136a6bfa2910/tails-ros-penetration-test-report-1-2.pdf).
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
In March 2023, [Radically Open Security](https://www.radicallyopensecurity.com/) conducted a security audit on the major improvements that we released in [[Tails 5.8|version_5.8]] (December 2022) on the Persistent Storage, the Unsafe Browser, and the Wayland integration.
El març de 2023, [Radically Open Security](https://www.radicallyopensecurity.com/) va dur a terme una auditoria de seguretat sobre les principals millores que vam publicar a [[Tails 5.8|version_5.8]] (desembre de 2022) a l'Emmagatzematge Persistent, el Navegador Insegur i la integració de Wayland.
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
[[!meta title="Security audit of Persistent Storage and Tor integration"]]
[[!meta title="Auditoria de seguretat de l'Emmagatzematge Persistent i la integració de Tor"]]
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
[[!tag announce]]
[[!tag announce]]
a year ago
victordargallo

Suggestion accepted

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
[[!tag announce]]
[[!tag announce]]
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
[[!pagetemplate template="news.tmpl"]]
[[!pagetemplate template="news.tmpl"]]
a year ago
victordargallo

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
Persistent Storage
Emmagatzematge Persistent
a year ago
victordargallo

Translation changed

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
<table>
<tr><th>ID</th><th>Issue</th><th>Description</th><th>Impact</th><th>Status</th><th>Release</th></tr>
<tr><td>TLS-001</td><td>[[!tails_ticket 19464]]</td><td>Local privilege escalation in tails-shell-library</td><td>High</td><td>Fixed</td><td>5.11</td></tr>
<tr><td>TLS-009</td><td>[[!tails_ticket 19599]]</td><td>Man-in-the-middle attack on onion-grater service</td><td>Low</td><td>Fixed</td><td>5.13</td></tr>
<tr><td>TLS-011</td><td>[[!tails_ticket 19576]]</td><td>Limited path traversal in tails-documentation</td><td>Low</td><td>Fixed</td><td>5.13</td></tr>
<tr><td>TLS-019</td><td>[[!tails_ticket 19677]]</td><td>Local privilege escalation in tailslib leads to arbitrary file read</td><td>High</td><td>Fixed</td><td>5.14</td></tr>
</table>
<table>
<tr><th>Identificació</th><th>Problema</th><th>Descripció</th><th>Impacte</th><th>Estat</th><th>Llançament</th></tr>
<tr><td>TLS-001</td><td>[[!tails_ticket 19464]]</td><td>Escalada de privilegis locals a la biblioteca tails-shell-library</td><td>Alta</td><td>Corregit</td><td>5.11</td></tr>
<tr><td>TLS-009</td><td>[[!tails_ticket 19599]]</td><td>Atac d'home al mig al servei d'onion-grater</td><td>Baixa</td><td>Corregit</td><td>5.13</td></tr>
<tr><td>TLS-011</td><td>[[!tails_ticket 19576]]</td><td>Travessa del camí limitat a la documentació de tails</td><td>Baixa</td><td>Corregit</td><td>5.13</td></tr>
<tr><td>TLS-019</td><td>[[!tails_ticket 19677]]</td><td>Escalada de privilegis locals a tailslib condueix a una lectura arbitrària del fitxer</td><td>Alta</td><td>Corregit</td><td>5.14</td></tr>
</table>
a year ago
victordargallo

Suggestion accepted

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
<table>
<tr><th>ID</th><th>Issue</th><th>Description</th><th>Impact</th><th>Status</th><th>Release</th></tr>
<tr><td>TLS-001</td><td>[[!tails_ticket 19464]]</td><td>Local privilege escalation in tails-shell-library</td><td>High</td><td>Fixed</td><td>5.11</td></tr>
<tr><td>TLS-009</td><td>[[!tails_ticket 19599]]</td><td>Man-in-the-middle attack on onion-grater service</td><td>Low</td><td>Fixed</td><td>5.13</td></tr>
<tr><td>TLS-011</td><td>[[!tails_ticket 19576]]</td><td>Limited path traversal in tails-documentation</td><td>Low</td><td>Fixed</td><td>5.13</td></tr>
<tr><td>TLS-019</td><td>[[!tails_ticket 19677]]</td><td>Local privilege escalation in tailslib leads to arbitrary file read</td><td>High</td><td>Fixed</td><td>5.14</td></tr>
</table>
<table>
<tr><th>Identificació</th><th>Problema</th><th>Descripció</th><th>Impacte</th><th>Estat</th><th>Llançament</th></tr>
<tr><td>TLS-001</td><td>[[!tails_ticket 19464]]</td><td>Escalada de privilegis locals a la biblioteca tails-shell-library</td><td>Alta</td><td>Corregit</td><td>5.11</td></tr>
<tr><td>TLS-009</td><td>[[!tails_ticket 19599]]</td><td>Atac d'home al mig al servei d'onion-grater</td><td>Baixa</td><td>Corregit</td><td>5.13</td></tr>
<tr><td>TLS-011</td><td>[[!tails_ticket 19576]]</td><td>Travessa del camí limitat a la documentació de tails</td><td>Baixa</td><td>Corregit</td><td>5.13</td></tr>
<tr><td>TLS-019</td><td>[[!tails_ticket 19677]]</td><td>Escalada de privilegis locals a tailslib condueix a una lectura arbitrària del fitxer</td><td>Alta</td><td>Corregit</td><td>5.14</td></tr>
</table>
a year ago
victordargallo

Suggestion accepted

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Catalan
Core
Nucli
a year ago

Search