{"id":137993,"date":"2025-06-22T11:11:54","date_gmt":"2025-06-22T09:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/soprovozhdayushhij-libxml2-otkazalsya-ot-osobogo-otnosheniya-k-ustraneniyu-uyazvimostej"},"modified":"2025-06-22T11:11:54","modified_gmt":"2025-06-22T09:11:54","slug":"soprovozhdayushhij-libxml2-otkazalsya-ot-osobogo-otnosheniya-k-ustraneniyu-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/soprovozhdayushhij-libxml2-otkazalsya-ot-osobogo-otnosheniya-k-ustraneniyu-uyazvimostej","title":{"rendered":"\u00centre\u021binerea libxml2 a renun\u021bat la o aten\u021bie deosebit\u0103 \u00een eliminarea vulnerabilit\u0103\u021bilor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nick Wellnhofer, coordonatorul bibliotecii libxml2, a anun\u021bat c\u0103 va interpreta vulnerabilit\u0103\u021bile ca erori obi\u0219nuite. Raport\u0103rile de vulnerabilit\u0103\u021bi nu vor mai fi tratate ca priorit\u0103\u021bi, ci vor fi remediate pe m\u0103sur\u0103 ce timpul permite. Informa\u021biile despre natura vulnerabilit\u0103\u021bilor vor fi publicate imediat, f\u0103r\u0103 a a\u0219tepta formarea unui patch \u0219i distribuirea remedierilor \u00een distribu\u021bii \u0219i sisteme de operare. Nick \u0219i-a delegat atribu\u021biile de coordonare a bibliotecii libxslt \u0219i a exprimat \u00eendoieli c\u0103 cineva ar fi dispus s\u0103 preia sus\u021binerea acesteia. <\/p>\n

\u00cen descrierea proiectului libxml2 a fost ad\u0103ugat un aviz care subliniaz\u0103 c\u0103 biblioteca este scris\u0103 de entuzia\u0219ti, este \u00eentre\u021binut\u0103 de un singur voluntar, a fost testat\u0103 slab, este scris\u0103 \u00eentr-un limbaj care gestioneaz\u0103 nesigur memoria, con\u021bine numeroase vulnerabilit\u0103\u021bi \u0219i nu este recomandat\u0103 pentru prelucrarea datelor nesigure. Raport\u0103rile de probleme de securitate trebuie trimise prin sistemul public de urm\u0103rire a erorilor \u0219i vor fi tratate ca orice alte erori. Vulnerabilit\u0103\u021bile nu vor mai fi remediate \u00een spatele u\u0219ilor \u00eenchise, iar toate informa\u021biile despre problemele de securitate vor fi publicate imediat, indiferent de cerin\u021bele de confiden\u021bialitate p\u00e2n\u0103 la o dat\u0103 stabilit\u0103 \u0219i f\u0103r\u0103 \u00eent\u00e2rzierea divulg\u0103rii informa\u021biilor p\u00e2n\u0103 la lansare. <\/p>\n

Se estimeaz\u0103 c\u0103 tratarea vulnerabilit\u0103\u021bilor ca erori obi\u0219nuite \u00eei va permite lui Nick s\u0103 se concentreze asupra activit\u0103\u021bii principale din libxml2, f\u0103r\u0103 a fi \u00eentrerupt de sarcini neplanificate. \u00cen prezent, Nick este nevoit s\u0103 aloce c\u00e2teva ore pe s\u0103pt\u0103m\u00e2n\u0103 pentru a aborda raport\u0103rile de vulnerabilitate \u0219i pentru a preg\u0103ti patch-uri, ceea ce creeaz\u0103 o presiune considerabil\u0103, av\u00e2nd \u00een vedere c\u0103 \u00eentre\u021binerea se face din pur\u0103 pasiune. <\/p>\n

Se observ\u0103 c\u0103 ascunderea informa\u021biilor despre vulnerabilit\u0103\u021bi p\u00e2n\u0103 la publicarea actualiz\u0103rilor \u0219i metricile de tip OpenSSF Scorecard reprezint\u0103 doar o \u00eencercare din partea marilor companii de a provoca un sentiment de vinov\u0103\u021bie \u00een r\u00e2ndul \u00eentre\u021bin\u0103torilor \u0219i de a-i determina s\u0103 lucreze gratuit. Impunerea de cerin\u021be suplimentare pentru voluntarii care ofer\u0103 suport f\u0103r\u0103 compensa\u021bie a fost denumit\u0103 o practic\u0103 d\u0103un\u0103toare. <\/p>\n

Potrivit spuselor lui Nic, biblioteca libxml2 nu are un nivel de calitate adecvat pentru utilizarea \u00een browsere \u0219i sisteme de operare. Cu toate acestea, companii mari precum Apple, Google \u0219i Microsoft au \u00eenceput s\u0103 utilizeze libxml2 \u00een sistemele \u0219i produsele lor. Astfel de ac\u021biuni sunt denumite iresponsabile, iar munca desf\u0103\u0219urat\u0103 este o \u00eencercare de a sc\u0103pa de simptome, nu de a elimina cauza problemelor. Nic consider\u0103 c\u0103 ar fi mai bine pentru proiect ca acele companii s\u0103 \u00eenceteze utilizarea libxml2.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0438\u043a \u0412\u0435\u043b\u043d\u0445\u043e\u0444\u0435\u0440 (Nick Wellnhofer), \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libxml2, \u043e\u0431\u044a\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u043e\u0442\u043d\u044b\u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0442\u0440\u0430\u043a\u0442\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438. \u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435, \u0430 \u0441\u0442\u0430\u043d\u0443\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043f\u043e \u043c\u0435\u0440\u0435 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0441\u0443\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0441\u0440\u0430\u0437\u0443, \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u044f\u0441\u044c \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0442\u0447\u0430 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438c\u0442\u0435\u043c\u0430\u0445. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-137993","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00centre\u021bin\u0103torul libxml2 a renun\u021bat la un tratament special \u00een ceea ce prive\u0219te remedierea vulnerabilit\u0103\u021bilor | ProHoster","description":"Nick Wellnhofer, care \u00eentre\u021bine biblioteca libxml2, a anun\u021bat c\u0103 de acum \u00eenainte va trata vulnerabilit\u0103\u021bile ca pe simple erori.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/soprovozhdayushhij-libxml2-otkazalsya-ot-osobogo-otnosheniya-k-ustraneniyu-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 libxml2 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u0442 \u043e\u0441\u043e\u0431\u043e\u0433\u043e \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f \u043a \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041d\u0438\u043a \u0412\u0435\u043b\u043d\u0445\u043e\u0444\u0435\u0440 (Nick Wellnhofer), \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libxml2, \u043e\u0431\u044a\u044f\u0432\u0438\u043b, \u0447\u0442\u043e \u043e\u0442\u043d\u044b\u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0442\u0440\u0430\u043a\u0442\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/soprovozhdayushhij-libxml2-otkazalsya-ot-osobogo-otnosheniya-k-ustraneniyu-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-06-22T09:11:54+00:00","article:modified_time":"2025-06-22T09:11:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"137993","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 13:24:14","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:24:14","updated":"2026-01-23 13:24:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/137993","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=137993"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/137993\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=137993"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=137993"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=137993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}