{"id":114688,"date":"2024-04-01T00:25:54","date_gmt":"2024-03-31T22:25:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok"},"modified":"2024-04-01T00:25:54","modified_gmt":"2024-03-31T22:25:54","slug":"vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok","title":{"rendered":"\u00c8 tempo di controllare le versioni: \u00e8 stata identificata un'attacco sofisticato alla catena di approvvigionamento su Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00c8 stato rilevato codice dannoso in xz\/liblzma, progettato per ottenere accesso remoto non autorizzato via SSH (backdoor) e per eseguire comandi (CVE-2024-3094). Il malware \u00e8 stato inserito nelle versioni 5.6.0 e 5.6.1 e, come riportato da OpenNet, \u00e8 riuscito a infiltrarsi in build e repository di Gentoo, Arch Linux, Debian sid\/unstable, Fedora Rawhide\/40-beta, openSUSE factory\/tumbleweed, LibreELEC, Alpine edge, Solus, CRUX, Cygwin, MSYS2 mingw, HP-UX, Homebrew, KaOS, NixOS unstable, OpenIndiana, Parabola, PCLinuxOS, OpenMandriva cooker e rolling, pkgsrc current, Slackware current, Manjaro, Void Linux. Tuttavia, non ovunque la backdoor pu\u00f2 essere attivata. La situazione \u00e8 aggravata dal fatto che lo sviluppatore, sospettato, ha partecipato negli ultimi anni anche a progetti correlati della comunit\u00e0. Pertanto, non ci sono motivi per fidarsi del codice sorgente di xz fino a che non vengano chiariti tutti i dettagli e le conseguenze dell'accaduto. In particolare, il repository corrispondente su GitHub \u00e8 gi\u00e0 stato bloccato con il messaggio: \"L'accesso a questo repository \u00e8 stato bloccato dai dipendenti di GitHub per violazione dei termini di servizio di GitHub.\"
Fonte: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 xz\/liblzma \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e SSH (\u0431\u044d\u043a\u0434\u043e\u0440) \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2024-3094). \u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0431\u044b\u043b \u0432\u043d\u0435\u0434\u0440\u0451\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.6.0 \u0438 5.6.1 \u0438, \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 OpenNet, \u0443\u0441\u043f\u0435\u043b \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Gentoo, Arch Linux, Debian sid\/unstable, Fedora Rawhide\/40-beta, openSUSE factory\/tumbleweed, LibreELEC, Alpine edge, Solus, CRUX, Cygwin, MSYS2 mingw, HP-UX, Homebrew, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114688","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c8 tempo di verificare le versioni: su Linux \u00e8 stata rilevata un'avanzata attacco alla catena di fornitura | ProHoster","description":"In xz\/liblzma \u00e8 stato rilevato un codice malevolo, volto ad ottenere accesso remoto non autorizzato tramite SSH (backdoor) ed esecuzione di comandi (CVE-2024-3094). Il malware \u00e8 stato inserito nelle versioni 5.6.0 e 5.6.1 e, come riportato da OpenNet, \u00e8 riuscito a entrare nelle build e nei repository di Gentoo, Arch Linux, Debian sid\/unstable, Fedora Rawhide\/40-beta, openSUSE factory\/tumbleweed, LibreELEC, Alpine edge, Solus, CRUX, Cygwin, MSYS2 mingw, HP-UX, Homebrew.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0440\u0435\u043c\u044f \u0441\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u0438: \u0432 Linux \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438\u0437\u043e\u0449\u0440\u0451\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a | ProHoster","og:description":"\u0412 xz\/liblzma \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e SSH (\u0431\u044d\u043a\u0434\u043e\u0440) \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2024-3094). \u0417\u043b\u043e\u0432\u0440\u0435\u0434 \u0431\u044b\u043b \u0432\u043d\u0435\u0434\u0440\u0451\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.6.0 \u0438 5.6.1 \u0438, \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 OpenNet, \u0443\u0441\u043f\u0435\u043b \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Gentoo, Arch Linux, Debian sid\/unstable, Fedora Rawhide\/40-beta, openSUSE factory\/tumbleweed, LibreELEC, Alpine edge, Solus, CRUX, Cygwin, MSYS2 mingw, HP-UX, Homebrew,","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/vremya-sverit-versii-v-linux-vyyavlena-izoshhryonnaya-ataka-na-czepochku-postavok","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-31T22:25:54+00:00","article:modified_time":"2024-03-31T22:25:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/114688","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=114688"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/114688\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=114688"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=114688"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=114688"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}