{"id":114657,"date":"2024-03-30T00:25:55","date_gmt":"2024-03-29T22:25:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor"},"modified":"2024-03-30T00:25:55","modified_gmt":"2024-03-29T22:25:55","slug":"v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor","title":{"rendered":"xz versioonides 5.6.0 ja 5.6.1 on avastatud tagauks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Debian'i arendaja ja infotehnoloogia uurija Andres Freund teatas xz versioonide 5.6.0 ja 5.6.1 l\u00e4htekoodis kahtlasest tagauksest.<\/p>\n

<\/p>\n

Tagauks on \u00fche m4-skripti rida<\/a>, mis lisab obfuskeeritud pahavara koodi configure skripti l\u00f5ppu. See kood muudab seej\u00e4rel \u00fchte projekti genereeritud Makefile'ist, mis l\u00f5puks viib pahavara (maskeeritud testarhivi bad-3-corrupt_lzma2.xz) lisandumiseni binaarfaili liblzma.<\/p>\n

<\/noindex><\/noindex> <\/p>\n

Selle intsidenti erip\u00e4ra on see, et pahavara kood on sisalduvad seda<\/em> levitatavates tar-arhiivides koos l\u00e4htekoodiga ja pole projekti git-repositooriumis.<\/p>\n

Teadaolevalt on isik, kelle nime all pahavara kood lisati projekti repositooriumisse, kas otseselt seotud juhtunuga v\u00f5i on langenud \u00fchele suurele tema isiklike kontode kompromiteerimisele (aga uurija kaldub eelistama esimest varianti, kuna see isik on isiklikult osalenud mitmetes aruteludes, mis puudutavad pahatahtlikke muudatusi).<\/p>\n

Uurija m\u00e4rgib, et l\u00f5puks on tagaukse eesm\u00e4rk ilmselt koodi sisestamine sshd protsessi ja RSA v\u00f5tme kontrollimise koodi petmine, ning toob v\u00e4lja mitmeid viise, kuidas kaudselt kontrollida, kas pahavara kood k\u00e4ivitatakse teie s\u00fcsteemis hetkel.<\/p>\n

<\/p>\n

Vastavalt uudisartiklile projekti openSUSE<\/a>, arvestades tagaukse koodi keerukust ja selle eeldatavat omakasutuse mehhanismi, on keeruline kindlaks teha, kas see on v\u00e4hemalt kord sellel masinal «aktiveeritud» ning soovitab t\u00e4ielikku ops\u00fcsteemi uuesti installimist koos k\u00f5igi asjakohaste v\u00f5tmete p\u00f6\u00f6ramisega k\u00f5ikidel masinatel, kus on olnud nakatunud xz versioonid.<\/p>\n

<\/noindex><\/p>\n

Allikas: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Andres Freund \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 xz \u0432\u0435\u0440\u0441\u0438\u0439 5.6.0 \u0438 5.6.1. \u0411\u044d\u043a\u0434\u043e\u0440 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0442\u0440\u043e\u0447\u043a\u0443 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 m4-\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0435\u0446 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 configure. \u042d\u0442\u043e\u0442 \u043a\u043e\u0434 \u0437\u0430\u0442\u0435\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 Makefile \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114657","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Koodis xz versioonide 5.6.0 ja 5.6.1 avastati tagauks | ProHoster","description":"Debian'i arendaja ja infotehnoloogia uurija Andres Freund teatas xz versioonide 5.6.0 ja 5.6.1 l\u00e4htekoodis kahtlasest tagauksest. Tagauks oli.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u0435 xz \u0432\u0435\u0440\u0441\u0438\u0439 5.6.0 \u0438 5.6.1 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Andres Freund \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 xz \u0432\u0435\u0440\u0441\u0438\u0439 5.6.0 \u0438 5.6.1. \u0411\u044d\u043a\u0434\u043e\u0440 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-29T22:25:55+00:00","article:modified_time":"2024-03-29T22:25:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114657","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=114657"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114657\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=114657"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=114657"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=114657"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}