{"id":112550,"date":"2023-12-28T15:10:16","date_gmt":"2023-12-28T13:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act"},"modified":"2023-12-28T15:10:16","modified_gmt":"2023-12-28T13:10:16","slug":"razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act","title":{"rendered":"V\u00fdvoj\u00e1\u0159i Debianu publikovali prohl\u00e1\u0161en\u00ed t\u00fdkaj\u00edc\u00ed se z\u00e1kona Cyber Resilience Act","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Byly zve\u0159ejn\u011bny v\u00fdsledky obecn\u00e9ho hlasov\u00e1n\u00ed (GR, general resolution) v\u00fdvoj\u00e1\u0159\u016f projektu Debian, kte\u0159\u00ed se pod\u00edlej\u00ed na \u00fadr\u017eb\u011b bal\u00ed\u010dk\u016f a spr\u00e1v\u011b infrastruktury, a byl schv\u00e1len text prohl\u00e1\u0161en\u00ed vyjad\u0159uj\u00edc\u00ed postoj projektu k navrhovan\u00e9mu z\u00e1konu Cyber Resilience Act (CRA), kter\u00fd je prosazov\u00e1n v Evropsk\u00e9 unii. Tento n\u00e1vrh z\u00e1kona zav\u00e1d\u00ed dal\u0161\u00ed po\u017eadavky na v\u00fdrobce software, kter\u00e9 maj\u00ed za c\u00edl podpo\u0159it udr\u017eov\u00e1n\u00ed bezpe\u010dnosti, odhalov\u00e1n\u00ed incident\u016f a rychl\u00e9 odstran\u011bn\u00ed zranitelnost\u00ed b\u011bhem cel\u00e9ho \u017eivotn\u00edho cyklu produktu. <\/p>\n

V p\u0159\u00edpad\u011b poru\u0161en\u00ed po\u017eadavk\u016f se pl\u00e1nuj\u00ed pokuty, kter\u00e9 mohou dos\u00e1hnout a\u017e 15 milion\u016f eur nebo 2,5 % ro\u010dn\u00edho obratu spole\u010dnosti. Po p\u0159ijet\u00ed z\u00e1kona budou v\u00fdrobci povinni poskytovat prost\u0159edky na dod\u00e1n\u00ed oprav zranitelnost\u00ed, prov\u00e1d\u011bt hodnocen\u00ed s bezpe\u010dnost\u00ed souvisej\u00edc\u00edch rizik p\u0159ed uveden\u00edm produktu na trh, testovat bezpe\u010dnost produktu (pro kritick\u00e9 syst\u00e9my se zav\u00e1d\u00ed povinn\u00fd extern\u00ed audit), odstra\u0148ovat zranitelnosti po celou dobu \u017eivotn\u00edho cyklu a p\u0159ed\u00e1vat informace o bezpe\u010dnostn\u00edch incidentech do 24 hodin od zji\u0161t\u011bn\u00ed probl\u00e9mu. <\/p>\n

I kdy\u017e soud\u011b podle nastupuj\u00edc\u00edch trend\u016f bude tento n\u00e1vrh z\u00e1kona zasahovat pouze v\u00fdrobce komer\u010dn\u00edho software, je spole\u010dnost znepokojena jeho negativn\u00edm dopadem na ekosyst\u00e9m v\u00fdvoje otev\u0159en\u00e9ho software a pova\u017euje ho za faktor, kter\u00fd br\u00e1n\u00ed rozvoji otev\u0159en\u00fdch projekt\u016f a omezuje pokrok OSS jako mezin\u00e1rodn\u00edho hnut\u00ed. Firmy vyv\u00edjej\u00edc\u00ed produkty na z\u00e1klad\u011b mezin\u00e1rodn\u00edch otev\u0159en\u00fdch projekt\u016f nebo vyu\u017e\u00edvaj\u00edc\u00ed otev\u0159en\u00e9 knihovny budou muset n\u00e9st odpov\u011bdnost za bezpe\u010dnostn\u00ed probl\u00e9my a nespr\u00e1vn\u00e9 opravov\u00e1n\u00ed zranitelnost\u00ed v k\u00f3du, i kdy\u017e byl tento k\u00f3d naps\u00e1n nad\u0161enci z jin\u00fdch zem\u00ed. O\u010dek\u00e1v\u00e1 se, \u017ee vznik dal\u0161\u00edch rizik pro podnik\u00e1n\u00ed sn\u00ed\u017e\u00ed atraktivitu v\u00fdvoje software zalo\u017een\u00e9ho na otev\u0159en\u00e9m k\u00f3du. <\/p>\n

Z\u00e1rove\u0148 mohou pr\u00e1vn\u00ed d\u016fsledky zas\u00e1hnout i nez\u00e1visl\u00e9 projekty zahrnuj\u00edc\u00ed k\u00f3d od v\u00fdrobc\u016f komer\u010dn\u00edch produkt\u016f. Nap\u0159\u00edklad vznik\u00e1 nejistota ohledn\u011b odpov\u011bdnosti v p\u0159\u00edpadech, kdy m\u016f\u017ee b\u00fdt otev\u0159en\u00fd k\u00f3d vyvinut\u00fd komer\u010dn\u00ed spole\u010dnost\u00ed p\u0159ed\u00e1n t\u0159et\u00edm stran\u00e1m v nekomer\u010dn\u00edch projektech a pou\u017e\u00edv\u00e1n v distribuc\u00edch Linuxu. <\/p>\n

N\u00e1vrh z\u00e1kona zav\u00e1d\u00ed pr\u00e1vn\u00ed odpov\u011bdnost za nedodr\u017eov\u00e1n\u00ed bezpe\u010dnostn\u00edch po\u017eadavk\u016f, co\u017e je v rozporu se soci\u00e1ln\u00edmi z\u00e1vazky Debiana, \u0161\u00ed\u0159it software pro jak\u00e9koli \u00fa\u010dely a bez omezen\u00ed. Debian nesleduje zapojen\u00ed k\u00f3du do komer\u010dn\u00edch projekt\u016f, zam\u011bstn\u00e1n\u00ed v\u00fdvoj\u00e1\u0159\u016f a zdroje financov\u00e1n\u00ed v\u00fdvoje dod\u00e1van\u00e9ho v distribuci, a proto vnucen\u00ed po\u017eadavk\u016f uveden\u00fdch v n\u00e1vrhu z\u00e1kona zvy\u0161uje pr\u00e1vn\u00ed rizika p\u0159i pou\u017e\u00edv\u00e1n\u00ed distribuce. <\/p>\n

Existuje riziko, \u017ee upstream projekty p\u0159estanou poskytovat sv\u016fj k\u00f3d z obav, \u017ee podle CRA budou \u010delit souvisej\u00edc\u00edm sankc\u00edm. CRA tak\u00e9 m\u016f\u017ee zkomplikovat procesy p\u0159ed\u00e1v\u00e1n\u00ed komunit\u011b otev\u0159en\u00e9ho k\u00f3du \u2014 aby v\u00fdvoj\u00e1\u0159 mohl zp\u0159\u00edstupnit k\u00f3d, bude muset posoudit mo\u017en\u00e9 pr\u00e1vn\u00ed d\u016fsledky. Krom\u011b toho n\u00e1vrh z\u00e1kona sni\u017euje atraktivitu otev\u0159en\u00e9ho v\u00fdvoje, proto\u017ee pr\u00e1ce se prov\u00e1d\u00ed na ve\u0159ejnosti a je transparentn\u00ed pro v\u0161echny, a k\u00f3d m\u016f\u017ee b\u00fdt pou\u017eit b\u011bhem v\u00fdvoje, co\u017e umo\u017e\u0148uje uplatnit po\u017eadavky CRA b\u011bhem pr\u00e1ce na produktu, zat\u00edmco propriet\u00e1rn\u00ed software je vyv\u00edjen za zav\u0159en\u00fdmi dve\u0159mi a podl\u00e9h\u00e1 z\u00e1konu a\u017e po fin\u00e1ln\u00edm vyd\u00e1n\u00ed. <\/p>\n

V\u00fdvoj\u00e1\u0159i Debiana vyz\u00fdvaj\u00ed k tomu, aby byl otev\u0159en\u00fd proces v\u00fdvoje zcela vy\u0148at z oblasti p\u016fsobnosti CRA a aby se z\u00e1kon vztahoval pouze na kone\u010dn\u00e9 produkty. Tak\u00e9 se navrhuje, aby se po\u017eadavky CRA neuplat\u0148ovaly na produkty individu\u00e1ln\u00edch podnikatel\u016f a mal\u00fdch podnik\u016f, proto\u017ee nemohou splnit v\u0161echny po\u017eadavky stanoven\u00e9 CRA a budou nuceni sv\u00e9 podnik\u00e1n\u00ed ukon\u010dit. <\/p>\n

Ve vyj\u00e1d\u0159en\u00ed je tak\u00e9 zm\u00edn\u011bn\u00e1 pochybnost ohledn\u011b po\u017eadavku na p\u0159ed\u00e1v\u00e1n\u00ed informac\u00ed o bezpe\u010dnostn\u00edch probl\u00e9mech do Evropsk\u00e9 agentury pro kybernetickou bezpe\u010dnost (ENISA) do 24 hodin po zji\u0161t\u011bn\u00ed probl\u00e9mu nebo obdr\u017een\u00ed informac\u00ed o zranitelnosti. Shroma\u017e\u010fov\u00e1n\u00ed informac\u00ed o v\u0161ech dosud neopraven\u00fdch zranitelnostech na jednom m\u00edst\u011b m\u016f\u017ee v\u00e9st k v\u00e1\u017en\u00fdm probl\u00e9m\u016fm pro v\u0161echny u\u017eivatele v p\u0159\u00edpad\u011b \u00faniku informac\u00ed, p\u0159ed\u00e1n\u00ed \u00fadaj\u016f tajn\u00fdm slu\u017eb\u00e1m nebo ohro\u017een\u00ed ENISA.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u0431\u0449\u0435\u0433\u043e \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f (GR, general resolution) \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Debian, \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0432 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d \u0442\u0435\u043a\u0441\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0441 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u0415\u0432\u0440\u043e\u0441\u043e\u044e\u0437\u0435 \u0437\u0430\u043a\u043e\u043d\u043e\u043f\u0440\u043e\u0435\u043a\u0442\u0430 Cyber Resilience Act (CRA). \u0417\u0430\u043a\u043e\u043d\u043e\u043f\u0440\u043e\u0435\u043a\u0442 \u0432\u0432\u043e\u0434\u0438\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0442\u0438\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112550","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V\u00fdvoj\u00e1\u0159i Debianu zve\u0159ejnili vyj\u00e1d\u0159en\u00ed t\u00fdkaj\u00edc\u00ed se n\u00e1vrhu z\u00e1kona o kybernetick\u00e9 odolnosti | ProHoster","description":"Byly zve\u0159ejn\u011bny v\u00fdsledky celkov\u00e9ho hlasov\u00e1n\u00ed (GR, obecn\u00e9 usnesen\u00ed) v\u00fdvoj\u00e1\u0159\u016f projektu Debian, kte\u0159\u00ed se pod\u00edlej\u00ed na spr\u00e1v\u011b bal\u00ed\u010dk\u016f a \u00fadr\u017eb\u011b infrastruktury, na kter\u00e9m byl schv\u00e1len text vyj\u00e1d\u0159en\u00ed s.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Debian \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0437\u0430\u043a\u043e\u043d\u043e\u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Cyber Resilience Act | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u0431\u0449\u0435\u0433\u043e \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f (GR, general resolution) \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Debian, \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0432 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d \u0442\u0435\u043a\u0441\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0441.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-28T13:10:16+00:00","article:modified_time":"2023-12-28T13:10:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/112550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=112550"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/112550\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=112550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=112550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=112550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}