Maxim Dunin, mid ka mid ah saddexda horumariye ee firfircoon ee Nginx, ayaa ku dhawaaqay abuurista fargeeto cusub - FreeNginx. Si ka duwan mashruuca Angie, kaas oo sidoo kale fargeeto Nginx, fargeetada cusub waxaa loo horumarin doonaa oo keliya sidii mashruuc beeleed aan faa'iido doon ahayn. FreeNginx waxaa loo dhigaa faraca ugu weyn ee Nginx - "iyaga oo tixgelinaya faahfaahinta - halkii, fargeetada ayaa ku haray F5." Hadafka FreeNginx ee la sheegay waa in la hubiyo in horumarka Nginx uu xor ka yahay faragelinta shirkadaha aan sabab lahayn.
Sababta loo abuuray mashruucan cusub ayaa ahayd khilaaf ka dhashay siyaasadda maamulka shirkadda F5 ee iska leh mashruuca Nginx. F5, iyada oo aan oggolaansho laga helin bulshada horumarisa, waxay beddeshay siyaasaddeeda amniga waxayna u wareegtay hab-dhaqanka ku meelaynta aqoonsiga CVE si ay u calaamadiso arrimaha khatarta ku ah amniga isticmaalaha sida baylahda (Maxim wuxuu ka soo horjeeday in CVE-yada loo qaybiyo khaladaadkan, maadaama ay joogaan koodka tijaabada ah iyo kuwa aan caadiga ahayn).
Ka dib markii xafiiska Moscow la xiray 2022, Maxim wuxuu ka fariistay F5, laakiin heshiis gaar ah ayaa sii xajistay doorkiisa horumarinta wuxuuna sii waday horumarinta iyo kormeerka mashruuca Nginx oo ah tabaruc. Sida laga soo xigtay Maxim, beddelka siyaasadda amniga ayaa ka soo horjeeda heshiiskii la soo gabagabeeyay mana sii xakameyn karo isbeddelada ay horumariyeyaasha shirkadda F5 ku sameeyaan Nginx, sidaa darteed, ma sii tixgelin karo Nginx mashruuc furan oo bilaash ah oo loo sameeyay dadka caadiga ah. wanaagsan.
Source: opennet.ru