Cov neeg tsim tawm ntawm PHP project tau ceeb toom txog kev cuam tshuam ntawm qhov project Git repository thiab nrhiav pom ob qhov kev ua phem ntxiv rau php-src repository thaum Lub Peb Hlis 28 sawv cev ntawm Rasmus Lerdorf, tus tsim ntawm PHP, thiab Nikita Popov, ib qho ntawm PHP developers tseem ceeb.
Txij li thaum tsis muaj kev ntseeg siab rau kev ntseeg siab ntawm cov neeg rau zaub mov uas Git repository tau tuav, cov neeg tsim khoom tau txiav txim siab tias kev tswj hwm Git infrastructure ntawm lawv tus kheej tsim muaj kev pheej hmoo ntxiv kev nyab xeeb thiab txav cov ntaub ntawv siv mus rau GitHub platform, uas tau thov kom siv. raws li qhov tseem ceeb. Tag nrho cov kev hloov pauv tam sim no yuav tsum raug xa mus rau GitHub, thiab tsis yog rau git.php.net, suav nrog thaum tsim, tam sim no koj tuaj yeem siv GitHub web interface.
Hauv thawj qhov kev ua phem phem, raws li kev kho tus typo hauv cov ntaub ntawv ext/zlib/zlib.c, ib qho kev hloov pauv uas yuav khiav PHP code dhau los hauv Tus Neeg Siv Khoom HTTP header yog cov ntsiab lus pib nrog lo lus "zerodium ". Tom qab cov neeg tsim tawm pom qhov kev hloov pauv tsis zoo thiab thim rov qab, qhov kev cog lus thib ob tau tshwm sim hauv qhov chaw cia khoom, uas tau thim rov qab PHP cov neeg tsim tawm qhov kev txiav txim kom thim rov qab qhov kev hloov siab phem.
Cov lej ntxiv muaj cov kab "REMOVETHIS: muag rau zerodium, nruab nrab 2017," uas yuav qhia tau tias txij li xyoo 2017 cov cai muaj lwm qhov, zoo-camouflaged, siab phem hloov pauv, lossis qhov tsis raug kho tsis raug muag rau Zerodium, lub tuam txhab uas yuav 0-hnub. vulnerabilities (Zerodium teb tias nws tsis yuav cov ntaub ntawv hais txog PHP qhov tsis zoo).
Lub sijhawm no, tsis muaj cov ntaub ntawv ntxaws ntxaws txog qhov xwm txheej; nws tsuas yog xav tias cov kev hloov pauv tau ntxiv los ntawm kev nyiag ntawm git.php.net server, thiab tsis yog kev cuam tshuam ntawm tus neeg tsim tawm nyiaj. Kev tsom xam ntawm lub chaw khaws cia tau pib rau qhov muaj lwm yam kev hloov pauv tsis zoo ntxiv rau cov teeb meem uas tau txheeb xyuas. Txhua tus neeg raug caw tuaj xyuas; yog tias kuaj pom muaj kev hloov pauv, koj yuav tsum xa cov ntaub ntawv mus rau [email tiv thaiv].
Hais txog kev hloov mus rau GitHub, txhawm rau kom tau txais kev nkag mus rau qhov chaw cia tshiab, cov neeg koom nrog kev txhim kho yuav tsum yog ib feem ntawm lub koom haum PHP. Cov uas tsis tau teev npe ua PHP tsim tawm ntawm GitHub yuav tsum hu rau Nikita Popov los ntawm email [email tiv thaiv]. Txhawm rau ntxiv, qhov yuav tsum tau ua yog txhawm rau ua kom muaj ob qhov kev lees paub tseeb. Tom qab tau txais cov cai tsim nyog los hloov lub chaw cia khoom, tsuas yog khiav cov lus txib "git tej thaj chaw deb teeb-url keeb kwm [email tiv thaiv]:php/php-src.git". Tsis tas li ntawd, qhov teeb meem ntawm kev txav mus rau qhov yuav tsum tau lees paub ntawm kev cog lus nrog lub npe digital ntawm tus tsim tawm raug txiav txim siab. Nws kuj tau thov kom txwv tsis pub ncaj qha ntxiv ntawm cov kev hloov pauv uas tsis tau raug tshuaj xyuas ua ntej.
Tau qhov twg los: opennet.ru