{"id":114657,"date":"2024-03-30T00:25:55","date_gmt":"2024-03-29T22:25:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor"},"modified":"2024-03-30T00:25:55","modified_gmt":"2024-03-29T22:25:55","slug":"v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor","title":{"rendered":"N\u00eb kodin e versioneve xz 5.6.0 dhe 5.6.1 \u00ebsht\u00eb gjetur nj\u00eb backdoor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Programatori i Debian dhe hulumtuesi n\u00eb fush\u00ebn e siguris\u00eb informacionit, Andres Freund, njofton p\u00ebr zbulimin e nj\u00eb bllokimi t\u00eb mundsh\u00ebm n\u00eb kodin burimor t\u00eb xz versioneve 5.6.0 dhe 5.6.1.<\/p>\n

<\/p>\n

Bllokimi p\u00ebrb\u00ebn nj\u00eb rresht n\u00eb nj\u00eb nga skiptet m4<\/a>, i cili shton kod t\u00eb keq t\u00eb obfuskuar n\u00eb fund t\u00eb skriptit configure. Ky kod m\u00eb pas modifikon nj\u00eb nga Makefile-t e gjeneruara t\u00eb projektit, e cila p\u00ebrfundimisht \u00e7on n\u00eb p\u00ebrfshirjen e kodit t\u00eb keq (i maskuar si nj\u00eb arkiv testues bad-3-corrupt_lzma2.xz) n\u00eb skedarin binar liblzma.<\/p>\n

<\/noindex><\/noindex> <\/p>\n

Ve\u00e7oria e incidentit q\u00ebndron n\u00eb faktin se kodi i keq ndodhet vet\u00ebm<\/em> n\u00eb arkivat tar q\u00eb shp\u00ebrndahen me kodin burimor dhe nuk \u00ebsht\u00eb i pranish\u00ebm n\u00eb depozitat git t\u00eb projektit.<\/p>\n

Raportohet se personi n\u00ebn emrin e t\u00eb cilit u shtua kodi i keq n\u00eb depozitat e projektit, \u00ebsht\u00eb ose i p\u00ebrfshir\u00eb drejtp\u00ebrdrejt n\u00eb ngjarje, ose ka qen\u00eb viktim\u00eb e nj\u00eb kompromisi serioz t\u00eb llogarive t\u00eb tij personale (por hulumtuesi \u00ebsht\u00eb m\u00eb shum\u00eb n\u00eb favor t\u00eb opsionit t\u00eb par\u00eb, sepse ky person ka marr\u00eb pjes\u00eb personalisht n\u00eb disa diskutime lidhur me ndryshimet e d\u00ebmshme).<\/p>\n

N\u00eb lidhje me k\u00ebt\u00eb, hulumtuesi thekson se q\u00ebllimi p\u00ebrfundimtar i bllokimit, duket se \u00ebsht\u00eb injektimi i kodit n\u00eb procesin sshd dhe ndryshimi i kodit p\u00ebr verifikimin e \u00e7el\u00ebsave RSA, duke dh\u00ebn\u00eb disa m\u00ebnyra p\u00ebr t\u00eb verifikuar indirekt n\u00ebse kodi i keq po ekzekutohet n\u00eb sistemin tuaj aktualisht.<\/p>\n

<\/p>\n

Sipas nj\u00eb artikulli lajmesh projekti openSUSE<\/a>, \u0432\u0432\u0438\u0434\u0443 \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0434\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u043b\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, «\u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b» \u043b\u0438 \u043e\u043d \u0445\u043e\u0442\u044f \u0431\u044b \u0440\u0430\u0437 \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u043d\u0443\u044e \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u041e\u0421 \u0441 \u0440\u043e\u0442\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0445 \u0440\u0435\u043b\u0435\u0432\u0430\u043d\u0442\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0445\u043e\u0442\u044f \u0431\u044b \u0440\u0430\u0437 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 xz.<\/p>\n

<\/noindex><\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Andres Freund \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 xz \u0432\u0435\u0440\u0441\u0438\u0439 5.6.0 \u0438 5.6.1. \u0411\u044d\u043a\u0434\u043e\u0440 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0442\u0440\u043e\u0447\u043a\u0443 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 m4-\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0435\u0446 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 configure. \u042d\u0442\u043e\u0442 \u043a\u043e\u0434 \u0437\u0430\u0442\u0435\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 Makefile \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114657","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bllokimi i zbuluar n\u00eb kodin xz versioneve 5.6.0 dhe 5.6.1 | ProHoster","description":"Programatori i Debian dhe hulumtuesi n\u00eb fush\u00ebn e siguris\u00eb informacionit, Andres Freund, njofton p\u00ebr zbulimin e nj\u00eb bllokimi t\u00eb mundsh\u00ebm n\u00eb kodin burimor t\u00eb xz versioneve 5.6.0 dhe 5.6.1. Bllokimi p\u00ebrb\u00ebn nj\u00eb rresht n\u00eb nj\u00eb nga skiptet m4, i cili shton kod t\u00eb keq t\u00eb obfuskuar n\u00eb fund t\u00eb skriptit configure. Ky kod m\u00eb pas modifikon nj\u00eb nga Makefile-t e gjeneruara t\u00eb projektit, e cila p\u00ebrfundimisht \u00e7on n\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u043a\u043e\u0434\u0435 xz \u0432\u0435\u0440\u0441\u0438\u0439 5.6.0 \u0438 5.6.1 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Debian \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Andres Freund \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 xz \u0432\u0435\u0440\u0441\u0438\u0439 5.6.0 \u0438 5.6.1. \u0411\u044d\u043a\u0434\u043e\u0440 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0442\u0440\u043e\u0447\u043a\u0443 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 m4-\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0435\u0446 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 configure. \u042d\u0442\u043e\u0442 \u043a\u043e\u0434 \u0437\u0430\u0442\u0435\u043c \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043e\u0434\u0438\u043d \u0438\u0437 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 Makefile \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-kode-xz-versij-5-6-0-i-5-6-1-obnaruzhen-bekdor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-29T22:25:55+00:00","article:modified_time":"2024-03-29T22:25:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114657","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=114657"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/114657\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=114657"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=114657"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=114657"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}