{"id":114665,"date":"2024-03-30T12:25:45","date_gmt":"2024-03-30T10:25:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/retrospektiva-prodvizheniya-bekdora-v-paket-xz"},"modified":"2024-03-30T12:25:45","modified_gmt":"2024-03-30T10:25:45","slug":"retrospektiva-prodvizheniya-bekdora-v-paket-xz","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/retrospektiva-prodvizheniya-bekdora-v-paket-xz","title":{"rendered":"Tagasivaade tagasiukse edendamisest paketis xz","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Eeldatavalt on xz paketi tagumine uks sisse viidud arendaja Jia Tan poolt, kes sai 2022. aastal hooldaja staatuse ja avaldas versioonist 5.4.2 alates v\u00e4ljaandeid. Lisaks xz projektile on eeldatav tagumise ukse autor olnud kaasatud ka xz-java ja xz-embedded pakettide arendamisse ning temast on saanud XZ Embedded projekti hooldaja, mida kasutatakse Linuxi tuumas. <\/p>\n

Tagasiulatuses lisandub b\u00e4nneri turundusele veel kaks osalejat \u2014 Jigar Kumar ja Hans Jansen, kes n\u00e4ivad olevat virtuaalsed karakterid. Jigar Kumar aitas aprillis 2022 kaasa Jia Tan'i varase pat\u0161ide vastuv\u00f5tmisele xz-s, pakkudes tuge stringifiltreerimise toetusele ja avaldades moraalset survet Lasse Collin'ile, tollasele hooldajale, kritiseerides tema v\u00f5imetust oma kohustusi t\u00e4ita ja mitten\u00f5uetekohaste pat\u0161ide tagasiv\u00f5tmist. Juunis n\u00f5ustus Lasse Collin, et projekt vajab uut hooldajat, kaebas l\u00e4bi p\u00f5lemise ja vaimse tervise probleemide \u00fcle ning andis hooldaja \u00f5igused \u00fcle Jia Tan'ile. P\u00e4rast seda ei ole Jigar Kumar enam postitustes ilmnenud. <\/p>\n

Saades maintainer'i \u00f5igused, on Jia Tan aktiivselt lisanud muudatusi projekti ja kahe aasta statistika kohaselt saavutas ta arendajate seas muudatuste arvu j\u00e4rgi teise koha. M\u00e4rtsis 2023 asendati paketi xz testimise eest vastutav Lasse Collin Jia Taniga, ning juunis v\u00f5eti xz-sse muudatused, mis lisavad liblzma toe IFUNC mehhanismile (crc64_fast konstruktor asendati ifunc'iga), mida hiljem kasutati funktsioonide p\u00fc\u00fcdmise korraldamiseks tagaukses. Muudatuse esitas Hans Jansen ning Jia Tan aktsepteeris selle xz-sse. Hans Jansen'i konto loodi vahetult enne pull-p\u00e4ringu saatmist. <\/p>\n

Juulis 2023 saatis Jia Tan oss-fuzz arendajatele taotluse ifunc'i kontrollimise keelamiseks, kuna see oli vastuolus \u2018-fsanitize=address\u2019 re\u017eiimiga. 2024. aasta veebruari alguses muudeti projekti link oss-fuzz'is ja peamise lehe kohal tukaani.org toimetati aadressilt \u2018tukaani.org\/xz\/\u2019 aadressile \u2018xz.tukaani.org\u2019, kus alamdomeen \u2018xz.tukaani.org\u2019 asus GitHub Pages teenuses ja seda kontrollis isiklikult Jia Tan. 23. veebruaril lisati xz hoidlasse dekoodri testimise arhiivid, sealhulgas failid bad-3-corrupt_lzma2.xz ja good-large_compressed.lzma, mis sisaldasid peidetud b\u00e4nnerit. M4-makrosid b\u00e4nneri aktiveerimiseks lisati ainult 5.6.0 versiooni tar-arhiivi ning need j\u00e4eti Git hoidlast v\u00e4lja, kuid olid siiski v\u00e4lja ilmnenud .gitignore failis. <\/p>\n

17. m\u00e4rtsil registreeriti Hans Jansen, kes oli varem v\u00e4lja t\u00f6\u00f6tanud IFUNCi toetamiseks plaastrid, Debian projekti osalejana, ning 25. m\u00e4rtsil saadeti temalt soovitus paketi xz-utils versiooni v\u00e4rskendamiseks Debian hoidlas. Versiooni v\u00e4rskendamise taotlused esitati ka Fedora ja Ubuntu arendajatele (Ubuntu hoidla oli sulgemise etapis ja muudatusi ei aktsepteeritud). <\/p>\n

Kaebustega xz versiooni uuendamiseks on liitunud mitmed kasutajad, kes on v\u00e4itnud, et uues versioonis on k\u00f5rvaldatud t\u00f6\u00f6katkestused, mis ilmnesid valgrindis silumisel (probleemid tulenesid vale virna paigutuse m\u00e4\u00e4ratlemisest tagaspordis ja need probleemid suudeti xz versioonis 5.6.1 lahendada). Katkestuse mure t\u00f5ttu v\u00f5ttis s\u00f5na ka Andres Freund, Microsofti t\u00f6\u00f6taja, kes osaleb PostgreSQL arenduses ja kellel \u00f5nnestus ilmseks teha tagaspord ja teavitada sellest kogukonda.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 \u043f\u0430\u043a\u0435\u0442 xz \u0431\u044b\u043b \u0432\u043d\u0435\u0434\u0440\u0451\u043d \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c Jia Tan, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0442\u0430\u0442\u0443\u0441 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b \u0440\u0435\u043b\u0438\u0437\u044b \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 5.4.2. \u041f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0439 \u0430\u0432\u0442\u043e\u0440 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 xz-java \u0438 xz-embedded, \u0438 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0447\u0438\u0441\u043b\u043e \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 XZ Embedded, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u044f\u0434\u0440\u0435 Linux. \u0412 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114665","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tagaspordi edendamise retrospektiiv xz paketti | ProHoster","description":"Eeldatavasti manustati xz paketti tagaspord arendaja Jia Tan, kes sai 2022. aastal hooldaja staatuse ning v\u00e4ljastas versioonidest alates 5.4.2. Lisaks xz projektile osales kahtlustatav autor xz-java ja xz-embedded pakettide arendamises ning oli kaasatud XZ Embedded projekti hooldajate hulka, mida kasutatakse Linuxi tuumas. Tagaspordi edendamise korralduse all.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/retrospektiva-prodvizheniya-bekdora-v-paket-xz","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u0442\u0440\u043e\u0441\u043f\u0435\u043a\u0442\u0438\u0432\u0430 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u043f\u0430\u043a\u0435\u0442 xz | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 \u043f\u0430\u043a\u0435\u0442 xz \u0431\u044b\u043b \u0432\u043d\u0435\u0434\u0440\u0451\u043d \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c Jia Tan, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0442\u0430\u0442\u0443\u0441 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043b \u0440\u0435\u043b\u0438\u0437\u044b \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 5.4.2. \u041f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0439 \u0430\u0432\u0442\u043e\u0440 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 xz-java \u0438 xz-embedded, \u0438 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0447\u0438\u0441\u043b\u043e \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 XZ Embedded, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u044f\u0434\u0440\u0435 Linux. \u0412 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/retrospektiva-prodvizheniya-bekdora-v-paket-xz","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-30T10:25:45+00:00","article:modified_time":"2024-03-30T10:25:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=114665"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/114665\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=114665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=114665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=114665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}