{"id":116209,"date":"2024-05-30T15:40:12","date_gmt":"2024-05-30T13:40:12","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora"},"modified":"2024-05-30T15:40:12","modified_gmt":"2024-05-30T13:40:12","slug":"proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","title":{"rendered":"Projekti XZ publikoi rezultatet e auditimit t\u00eb commit-eve dhe p\u00ebrdit\u00ebsimin e par\u00eb pas zbulimit t\u00eb backdoor-it","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Lasse Collin, ish-mb\u00ebshtet\u00ebsi i projektit xz, q\u00eb n\u00eb vitin 2022 i kaloi t\u00eb drejt\u00ebn mb\u00ebshtet\u00ebsit t\u00eb ri Jia Tan, veprimtaria e t\u00eb cilit \u00e7oi n\u00eb implementimin e nj\u00eb backdoor, publikoi versione korrigjuese t\u00eb paket\u00ebs XZ Utils 5.2.13, 5.4.7 dhe 5.6.2, n\u00eb t\u00eb cilat jan\u00eb fshir\u00eb komponent\u00ebt e backdoor dhe ndryshimet e tjera t\u00eb dyshimta, t\u00eb shtuar si rezultat i aktivitetit t\u00eb d\u00ebmsh\u00ebm t\u00eb mb\u00ebshtet\u00ebsit t\u00eb kaluar. <\/p>\n

P\u00ebr m\u00eb tep\u00ebr, \u00ebsht\u00eb publikuar nj\u00eb raport mbi rishikimin e depozit\u00ebs Git dhe ndryshimet e b\u00ebra q\u00eb nga dhjetori 2022 gjat\u00eb koh\u00ebs q\u00eb Jia Tan ishte mb\u00ebshtet\u00ebsi. Ndryshimet jan\u00eb analizuar n\u00eb nivelin e komiteve t\u00eb ve\u00e7anta. Komitetet n\u00eb depozita nuk ishin n\u00ebnshkruar me nj\u00eb n\u00ebnshkrim digjital, por nuk ka pasur prova t\u00eb falsifikimit nga ana e komit\u00ebve. N\u00eb total, jan\u00eb fshir\u00eb 8 komitete t\u00eb d\u00ebmshme nga depozita. <\/p>\n

Kodi CRC CLMUL ende nuk \u00ebsht\u00eb fshir\u00eb nga baza e kodit, i cili shkakton falsifikime gjat\u00eb kontrollit n\u00eb MSAN (Memory sanitizer) dhe probleme me OSS Fuzz. N\u00eb t\u00eb ardhmen, ky kod planifikohet t\u00eb rishikohet, por p\u00ebr momentin \u00ebsht\u00eb vendosur t\u00eb mos preket, n\u00eb m\u00ebnyr\u00eb q\u00eb t\u00eb shmangen regresionet n\u00eb deg\u00ebt e vjetra. Nuk jan\u00eb zbuluar ndryshime t\u00eb dyshimta n\u00eb komitetet e vjetra, t\u00eb shtuar para ndryshimeve q\u00eb lidhen me promovimin e backdoor. P\u00ebrve\u00e7 k\u00ebsaj, jan\u00eb kontrolluar ve\u00e7mas skedar\u00ebt po t\u00eb lokalizimit, metadatate n\u00eb skedar\u00ebt tar dhe arkivat me l\u00ebshimet dhe p\u00ebrkthimet. <\/p>\n

Nga ndryshimet gjithashtu p\u00ebrmendet p\u00ebrfshirja e p\u00ebrmir\u00ebsimeve t\u00eb grumbulluara t\u00eb gabimeve dhe fshirja e mb\u00ebshtetjes p\u00ebr mekanizmin IFUNC, i ofruar n\u00eb Glibc p\u00ebr thirrje indirekte t\u00eb funksioneve, i cili ishte p\u00ebrdorur p\u00ebr organizimin e kapjes s\u00eb funksioneve n\u00eb backdoor. \u00cbsht\u00eb theksuar se p\u00ebrdorimi i IFUNC vet\u00ebm sa e komplikon kodin, nd\u00ebrsa p\u00ebrfitimi n\u00eb performanc\u00eb nga ai nuk \u00ebsht\u00eb i r\u00ebnd\u00ebsish\u00ebm. Si mas\u00eb paraprake, nga paketa me kod burimor jan\u00eb fshir\u00eb gjithashtu logot XZ, versionet PDF t\u00eb faqeve man dhe dy teste p\u00ebr arkitektur\u00ebn x86 dhe SPARC, n\u00eb t\u00eb cilat si input p\u00ebrpunoheshin skedar\u00eb objekt. <\/p>\n

N\u00eb risit\u00eb e reja n\u00eb dekoderin xzdec \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr versionin 4 ABI t\u00eb mekanizmit t\u00eb izolimit t\u00eb aplikacioneve Landlock. N\u00eb skriptet nd\u00ebrtuese t\u00eb Autotools \u00ebsht\u00eb shtuar opsioni «—enable-doxygen», dhe n\u00eb skenarin Cmake parametri ENABLE_DOXYGEN p\u00ebr gjenerimin dhe instalimin e dokumentacionit mbi API liblzma, duke p\u00ebrdorur Doxygen. Dokumentacioni i gjeneruar tashm\u00eb \u00ebsht\u00eb fshir\u00eb nga paketa.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041b\u0430\u0441\u0441\u0435 \u041a\u043e\u043b\u043b\u0438\u043d (Lasse Collin), \u0441\u0442\u0430\u0440\u044b\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz, \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0448\u0438\u0439 \u043f\u0440\u0430\u0432\u0430 \u043d\u043e\u0432\u043e\u043c\u0443 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 Jia Tan, \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 XZ Utils 5.2.13, 5.4.7 \u0438 5.6.2, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0438 \u043f\u0440\u043e\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043e\u0442\u0447\u0451\u0442 \u043e \u0440\u0435\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116209","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekti XZ publikoi rezultatin e auditit t\u00eb komiteteve dhe p\u00ebrdit\u00ebsimin e par\u00eb pas identifikimit t\u00eb backdoor-it | ProHoster","description":"Lasse Collin, ish-mikprit\u00ebsi i projektit xz, i cili n\u00eb vitin 2022 i transferoi t\u00eb drejtat mikprit\u00ebsit t\u00eb ri Jia Tan, veprimet e t\u00eb cilit \u00e7uan n\u00eb zbatimin e nj\u00eb backdoor, publikoi versionet e korrigjuara t\u00eb paket\u00ebs.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 XZ \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0438 \u043f\u0435\u0440\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 | ProHoster","og:description":"\u041b\u0430\u0441\u0441\u0435 \u041a\u043e\u043b\u043b\u0438\u043d (Lasse Collin), \u0441\u0442\u0430\u0440\u044b\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz, \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0448\u0438\u0439 \u043f\u0440\u0430\u0432\u0430 \u043d\u043e\u0432\u043e\u043c\u0443 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 Jia Tan, \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-30T13:40:12+00:00","article:modified_time":"2024-05-30T13:40:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116209","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 01:24:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:24:35","updated":"2026-01-23 01:24:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116209","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=116209"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116209\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=116209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=116209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=116209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}