None

Changes committed

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
Changes committed 3 days ago
xin

Suggestion removed

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
[[!tag security/audit]]
[[!tag security/audit]]
3 days ago
xin

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
[[!tag security/audit]]
[[!tag security/audit]]
3 days ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
To better protect our users, we addressed most of the security vulnerabilities as soon as they were discovered and reported to us, without waiting for the audit to be complete and public. We can now share with your the [final report](https://gitlab.tails.boum.org/tails/tails/uploads/df935595f41faa687805136a6bfa2910/tails-ros-penetration-test-report-1-2.pdf).
Para proteger melhor nossos usuários, corrigimos a maioria das vulnerabilidades de segurança assim que foram descobertas e reportadas, sem esperar que a auditoria fosse concluída e pública. Agora podemos compartilhar com vocês o [relatório final](https://gitlab.tails.boum.org/tails/tails/uploads/df935595f41faa687805136a6bfa2910/tails-ros-penetration-test-report-1-2.pdf).
2 weeks ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
In March 2023, [Radically Open Security](https://www.radicallyopensecurity.com/) conducted a security audit on the major improvements that we released in [[Tails 5.8|version_5.8]] (December 2022) on the Persistent Storage, the Unsafe Browser, and the Wayland integration.
Em março de 2023, a [Radically Open Security](https://www.radicallyopensecurity.com/) conduziu uma auditoria de segurança nas principais melhorias que lançamos no [[Tails 5.8|versão_5.8]] (dezembro de 2022) no Armazenamento Persistente, no Navegador Inseguro e na integração do Wayland.
2 weeks ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
[[!tag security/audit]]
[[!tag security/audit]]
2 weeks ago
None

Changes committed

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
Changes committed 2 months ago
drebs

Suggestion accepted

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
[[!tag announce]]
[[!tag announce]]
2 months ago
drebs

Contributor joined

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
Contributor joined 2 months ago
None

Changes committed

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
Changes committed 7 months ago
xin

Translation changed

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
[[!tag announce]]
[[!tag announce]]
7 months ago
None

Changes committed

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
Changes committed 7 months ago
xin

Translation approved

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
[[!tag announce]]
[[!tag announce]]
7 months ago
xin

Translation changed

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
[[!tag announce]]
[[!tag announce]]
7 months ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
<table>
<tr><th>ID</th><th>Issue</th><th>Description</th><th>Impact</th><th>Status</th><th>Release</th></tr>
<tr><td>TLS-001</td><td>[[!tails_ticket 19464]]</td><td>Local privilege escalation in tails-shell-library</td><td>High</td><td>Fixed</td><td>5.11</td></tr>
<tr><td>TLS-009</td><td>[[!tails_ticket 19599]]</td><td>Man-in-the-middle attack on onion-grater service</td><td>Low</td><td>Fixed</td><td>5.13</td></tr>
<tr><td>TLS-011</td><td>[[!tails_ticket 19576]]</td><td>Limited path traversal in tails-documentation</td><td>Low</td><td>Fixed</td><td>5.13</td></tr>
<tr><td>TLS-019</td><td>[[!tails_ticket 19677]]</td><td>Local privilege escalation in tailslib leads to arbitrary file read</td><td>High</td><td>Fixed</td><td>5.14</td></tr>
</table>
<tabela>
<tr><th>ID</th><th>Problema</th><th>Descrição</th><th>Impacto</th><th>Status</th><th>Lançamento</th </tr>
<tr><td>TLS-001</td><td>[[!tails_ticket 19464]]</td><td>Escalonamento de privilégios locais na biblioteca tails-shell</td><td>Alto</td ><td>Corrigido</td><td>5.11</td></tr>
<tr><td>TLS-009</td><td>[[!tails_ticket 19599]]</td><td>Ataque man-in-the-middle ao serviço de ralador de cebola</td><td> Baixo</td><td>Fixo</td><td>5,13</td></tr>
<tr><td>TLS-011</td><td>[[!tails_ticket 19576]]</td><td>Travessia de caminho limitada na documentação do tails</td><td>Baixa</td>< td>Corrigido</td><td>5.13</td></tr>
<tr><td>TLS-019</td><td>[[!tails_ticket 19677]]</td><td>O escalonamento de privilégios locais no tailslib leva à leitura arbitrária de arquivos</td><td>Alto</ td><td>Corrigido</td><td>5.14</td></tr>
</tabela>
8 months ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
<table>
<tr><th>ID</th><th>Issue</th><th>Description</th><th>Impact</th><th>Status</th><th>Release</th></tr>
<tr><td>TLS-003</td><td>[[!tails_ticket 19546]]</td><td>Local privilege escalation in Persistent folder activation hook</td><td>High</td><td>Fixed</td><td>5.11</td></tr>
<tr><td>TLS-004</td><td>[[!tails_ticket 19547]]</td><td>Symlink attack in Persistent folder deactivation hook</td><td>Low</td><td>Fixed</td><td>5.11</td></tr>
<tr><td>TLS-005</td><td>[[!tails_ticket 19548]]</td><td>Local privilege escalation in GnuPG feature activation hook</td><td>High</td><td>Fixed</td><td>5.11</td></tr>
</table>
<tabela>
<tr><th>ID</th><th>Problema</th><th>Descrição</th><th>Impacto</th><th>Status</th><th>Lançamento</th </tr>
<tr><td>TLS-003</td><td>[[!tails_ticket 19546]]</td><td>Escalonamento de privilégios locais no gancho de ativação de pasta persistente</td><td>Alto</td> <td>Corrigido</td><td>5.11</td></tr>
<tr><td>TLS-004</td><td>[[!tails_ticket 19547]]</td><td>Ataque de link simbólico no gancho de desativação de pasta persistente</td><td>Baixo</td>< td>Corrigido</td><td>5.11</td></tr>
<tr><td>TLS-005</td><td>[[!tails_ticket 19548]]</td><td>Escalonamento de privilégios locais no gancho de ativação de recurso do GnuPG</td><td>Alto</td> <td>Corrigido</td><td>5.11</td></tr>
</tabela>
8 months ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
<table>
<tr><th>ID</th><th>Issue</th><th>Description</th><th>Impact</th><th>Status</th><th>Release</th></tr>
<tr><td>TLS-012</td><td>[[!tails_ticket 19585]]</td><td>Leak clear IP as low-privileged user amnesia</td><td>High</td><td>Fixed</td><td>5.12</td></tr>
<tr><td>TLS-013</td><td>[[!tails_ticket 19594]]</td><td>Local privilege escalation to Tor Connection sandbox</td><td>High</td><td>Fixed</td><td>5.12</td></tr>
<tr><td>TLS-014</td><td>[[!tails_ticket 19595]]</td><td>Local privilege escalation to Tor Browser sandbox</td><td>Moderate</td><td>Fixed</td><td>5.13</td></tr>
<tr><td>TLS-017</td><td>[[!tails_ticket 19610]]</td><td>Insecure permissions of chroot overlay</td><td>Unknown</td><td>Fixed</td><td>5.13</td></tr>
</table>
<tabela>
<tr><th>ID</th><th>Problema</th><th>Descrição</th><th>Impacto</th><th>Status</th><th>Lançamento</th </tr>
<tr><td>TLS-012</td><td>[[!tails_ticket 19585]]</td><td>Vazamento de IP limpo como amnésia de usuário com poucos privilégios</td><td>Alta</td ><td>Corrigido</td><td>5.12</td></tr>
<tr><td>TLS-013</td><td>[[!tails_ticket 19594]]</td><td>Escalonamento de privilégios locais para sandbox da Conexão Tor</td><td>Alto</td>< td>Corrigido</td><td>5.12</td></tr>
<tr><td>TLS-014</td><td>[[!tails_ticket 19595]]</td><td>Escalonamento de privilégios locais para sandbox do navegador Tor</td><td>Moderado</td>< td>Corrigido</td><td>5.13</td></tr>
<tr><td>TLS-017</td><td>[[!tails_ticket 19610]]</td><td>Permissões inseguras de sobreposição de chroot</td><td>Desconhecido</td><td> Corrigido</td><td>5.13</td></tr>
</tabela>
8 months ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
As good as the results of this audit are, they also serve as a reminder that no software is ever 100% secure and that every release of Tails can fix critical security vulnerabilities. Your best protection against all kinds of attack is to keep your Tails up-to-date.
Por melhores que sejam os resultados desta auditoria, eles também servem como um lembrete de que nenhum software é 100% seguro e que cada versão do Tails pode corrigir vulnerabilidades críticas de segurança. Sua melhor proteção contra todos os tipos de ataques é manter seu Tails atualizado.
8 months ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
We fixed all these issues as soon as possible and before making them public on our GitLab. The last issue was fixed in 5.14, 3 weeks after it was reported to us.
Corrigimos todos esses problemas o mais rápido possível e antes de torná-los públicos em nosso GitLab. O último problema foi corrigido em 5.14, 3 semanas depois de ter sido relatado para nós.
8 months ago
Optimuspraimu

Suggestion added

  1. Tails
  2. wiki/src/news/audit_by_ROS.*.po
  3. Portuguese
The auditors found 6 *High*, 1 *Moderate*, 3 *Low*-severity issues. Another issue was fixed before the actual impact was assessed and so marked as having *Unknown* severity.
Os auditores encontraram 6 problemas de gravidade *alta*, 1 *moderada* e 3 de gravidade *baixa. Outro problema foi corrigido antes que o impacto real fosse avaliado e marcado como de gravidade *Desconhecida*.
8 months ago

Search