{"id":116209,"date":"2024-05-30T15:40:12","date_gmt":"2024-05-30T13:40:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora"},"modified":"2024-05-30T15:40:12","modified_gmt":"2024-05-30T13:40:12","slug":"proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","title":{"rendered":"Proiectul XZ a publicat rezultatele auditului comentariilor \u0219i prima actualizare dup\u0103 descoperirea backdoor-ului.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Lasse Collin, vechiul men\u021bin\u0103tor al proiectului xz, a transferat \u00een 2022 drepturile noului men\u021bin\u0103tor Jia Tan, a c\u0103rui activitate a dus la introducerea backdoor-ului. Acesta a publicat versiuni corective ale pachetului XZ Utils 5.2.13, 5.4.7 \u0219i 5.6.2, \u00een care au fost eliminate componentele backdoor-ului \u0219i alte modific\u0103ri suspecte ad\u0103ugate \u00een urma activit\u0103\u021bilor r\u0103u inten\u021bionate ale fostului men\u021bin\u0103tor. <\/p>\n

De asemenea, a fost publicat un raport de revizuire a depozitului Git \u0219i a modific\u0103rilor ad\u0103ugate din decembrie 2022, \u00een perioada \u00een care Jia Tan a fost men\u021bin\u0103tor. Modific\u0103rile au fost analizate la nivel de comentariu individual. Comentariile din depozit nu au fost semnate digital, dar nu au fost descoperite dovezi de falsificare din partea contribuitorilor. \u00cen total, 8 comentarii r\u0103u inten\u021bionate au fost eliminate din depozit. <\/p>\n

Codul CRC CLMUL nu a fost \u00eenc\u0103 eliminat din baza de cod, ceea ce duce la declan\u0219\u0103ri false \u00een timpul verific\u0103rii \u00een MSAN (Memory sanitizer) \u0219i la probleme cu OSS Fuzz. \u00cen continuare, acest cod este planificat s\u0103 fie ref\u0103cut, dar deocamdat\u0103 a fost decis s\u0103 nu fie atins, pentru a evita regresiile \u00een ramurile vechi. Nu au fost descoperite modific\u0103ri suspecte \u00een comentariile vechi, ad\u0103ugate \u00eenainte de implementarea modific\u0103rilor legate de backdoor. Fi\u0219ierele po de localizare, metadatele din fi\u0219ierele tar \u0219i arhivele cu versiuni \u0219i traduceri au fost verificate separat. <\/p>\n

Printre modific\u0103ri se num\u0103r\u0103 includerea corec\u021biilor de erori acumulate \u0219i eliminarea suportului pentru mecanismul IFUNC, oferit de Glibc pentru apelarea indirect\u0103 a func\u021biilor, care a fost folosit pentru interceptarea func\u021biilor \u00een backdoor. S-a observat c\u0103 utilizarea IFUNC doar complic\u0103 codul, iar c\u00e2\u0219tigul de performan\u021b\u0103 din acesta nu este semnificativ. Ca m\u0103sur\u0103 de precau\u021bie, din pachetul cu cod surs\u0103 au fost eliminate, de asemenea, logo-ul XZ, versiunile PDF ale paginilor man \u0219i dou\u0103 teste pentru arhitecturile x86 \u0219i SPARC, \u00een care erau procesate fi\u0219iere obiect ca date de intrare. <\/p>\n

Printre nout\u0103\u021bile din decoderul xzdec se num\u0103r\u0103 suportul pentru versiunea 4 ABI a mecanismului de izolare a aplica\u021biilor Landlock. \u00cen scripturile de construire Autotools a fost ad\u0103ugat\u0103 op\u021biunea «—enable-doxygen», iar \u00een scriptul Cmake parametrul ENABLE_DOXYGEN pentru generarea \u0219i instalarea documenta\u021biei API liblzma folosind Doxygen. Documenta\u021bia deja generat\u0103 a fost eliminat\u0103 din pachet.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041b\u0430\u0441\u0441\u0435 \u041a\u043e\u043b\u043b\u0438\u043d (Lasse Collin), \u0441\u0442\u0430\u0440\u044b\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz, \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0448\u0438\u0439 \u043f\u0440\u0430\u0432\u0430 \u043d\u043e\u0432\u043e\u043c\u0443 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 Jia Tan, \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 XZ Utils 5.2.13, 5.4.7 \u0438 5.6.2, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0438 \u043f\u0440\u043e\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043e\u0442\u0447\u0451\u0442 \u043e \u0440\u0435\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116209","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Proiectul XZ a publicat rezultatul auditului commit-urilor \u0219i prima actualizare dup\u0103 descoperirea backdoor-ului | ProHoster","description":"Lasse Collin, vechiul coordonator al proiectului xz, care a transferat drepturile unui nou coordonator, Jia Tan, \u00een 2022, a publicat versiuni corective ale pachetului, activitate care a dus la implementarea unui backdoor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 XZ \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0438 \u043f\u0435\u0440\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 | ProHoster","og:description":"\u041b\u0430\u0441\u0441\u0435 \u041a\u043e\u043b\u043b\u0438\u043d (Lasse Collin), \u0441\u0442\u0430\u0440\u044b\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz, \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0448\u0438\u0439 \u043f\u0440\u0430\u0432\u0430 \u043d\u043e\u0432\u043e\u043c\u0443 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 Jia Tan, \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-30T13:40:12+00:00","article:modified_time":"2024-05-30T13:40:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116209","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 01:24:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:24:35","updated":"2026-01-23 01:24:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/116209","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=116209"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/116209\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=116209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=116209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=116209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}