{"id":123408,"date":"2025-04-04T15:05:07","date_gmt":"2025-04-04T13:05:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-xz-utils-5-8-1-s-ustraneniem-uyazvimosti"},"modified":"2025-04-04T15:05:07","modified_gmt":"2025-04-04T13:05:07","slug":"obnovlenie-xz-utils-5-8-1-s-ustraneniem-uyazvimosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-xz-utils-5-8-1-s-ustraneniem-uyazvimosti","title":{"rendered":"P\u00ebrdit\u00ebsimi XZ Utils 5.8.1 me rregullimin e dob\u00ebsive","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
L\u00ebshimi i paket\u00ebs XZ Utils 5.8.1 \u00ebsht\u00eb publikuar, duke p\u00ebrfshir\u00eb bibliotek\u00ebn liblzma dhe utilitetet p\u00ebr t\u00eb punuar me t\u00eb dh\u00ebna t\u00eb kompresuara n\u00eb formatin . XZ Utils 5.8.1 \u00ebsht\u00eb l\u00ebshimi i par\u00eb i r\u00ebnd\u00ebsish\u00ebm pas incidentit t\u00eb zbuluar t\u00eb backdoor-it q\u00eb organizonte hyrjen p\u00ebrmes sshd. Jav\u00ebn e kaluar, nj\u00eb etiket\u00eb 5.8.0 u krijua n\u00eb Git, por l\u00ebshimi nuk u shpall zyrtarisht p\u00ebr shkak t\u00eb problemeve t\u00eb zbuluara pas publikimit t\u00eb etiket\u00ebs, q\u00eb ndikonin n\u00eb performanc\u00ebn dhe kompatibilitetin me versionet e vjetra t\u00eb GNU make. <\/p>\n
N\u00eb p\u00ebrdit\u00ebsimin e XZ Utils 5.8.1, \u00ebsht\u00eb eliminuar nj\u00eb ndjeshm\u00ebri (CVE-2025-31115) q\u00eb shkaktonte d\u00ebshtim t\u00eb papritur gjat\u00eb p\u00ebrpjekjes p\u00ebr t\u00eb shp\u00ebrb\u00ebr\u00eb arkivat e dizajnuara posa\u00e7\u00ebrisht. Ndjeshm\u00ebria ndodhte p\u00ebr shkak t\u00eb qasjes n\u00eb nj\u00eb hap\u00ebsir\u00eb t\u00eb liruar m\u00eb par\u00eb (use after free). Nj\u00eb sulmues mund t\u00eb arrij\u00eb t\u00eb shkruaj\u00eb vler\u00ebn e tij n\u00eb nj\u00eb adres\u00eb, e cila llogaritet si . Problemi konsiderohet si nj\u00eb gabim i rast\u00ebsish\u00ebm, pasi ndryshimi q\u00eb e shkaktoi at\u00eb u fut n\u00eb kod p\u00ebrpara se zhvilluesi Jia Tan t\u00eb vinte n\u00eb projekt, veprimtaria e t\u00eb cilit \u00e7oi n\u00eb implementimin e backdoor-it. <\/p>\n
Problemi shfaqet q\u00eb nga l\u00ebshimi i XZ Utils 5.3.3alpha gjat\u00eb dekodimit n\u00eb modalitetin shum\u00ebthesar (dekoduesi nj\u00ebthesar nuk \u00ebsht\u00eb prekur nga problemi). P\u00ebrve\u00e7 utiliteteve standarde nga paketa xz, ndjeshm\u00ebria shfaqet gjithashtu n\u00eb programe t\u00eb jashtme q\u00eb p\u00ebrdorin funksionin lzma_stream_decoder_mt nga biblioteka liblzma. Ndjeshm\u00ebria \u00ebsht\u00eb eliminuar n\u00eb l\u00ebshimin XZ Utils 5.8.1 dhe gjithashtu \u00ebsht\u00eb transferuar n\u00eb deg\u00ebt stabile 5.4 dhe 5.6. Mund t\u00eb ndiqni p\u00ebrdit\u00ebsimet n\u00eb shp\u00ebrndarje n\u00eb k\u00ebto faqe: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. Si nj\u00eb zgjidhje alternative p\u00ebr mbrojtje, mund t\u00eb \u00e7aktivizoni dekodimin e skedar\u00ebve n\u00eb modalitetin shum\u00ebthesar, duke p\u00ebrdorur opsionet ose duke p\u00ebrdorur utilitetin xzdec. <\/p>\n
Nga ndryshimet funksionale n\u00eb deg\u00ebn XZ Utils 5.8, mund t\u00eb p\u00ebrmendim: <\/p>\n
\n
N\u00eb dekoduesin LZMA\/LZMA2 \u00ebsht\u00eb shtuar mund\u00ebsia e p\u00ebrdorimit t\u00eb instrukcioneve SSE2 n\u00eb vend t\u00eb funksionit memcpy() n\u00eb sistemet 32- dhe 64-bit x86. Ky ndryshim ka lejuar nj\u00eb reduktim t\u00eb koh\u00ebs s\u00eb dekodimit deri n\u00eb 5% kur \u00ebsht\u00eb nd\u00ebrtuar me Glibc, dhe deri n\u00eb 15% kur \u00ebsht\u00eb nd\u00ebrtuar me musl gjat\u00eb shp\u00ebrb\u00ebrjes s\u00eb skedar\u00ebve me shkall\u00eb shum\u00eb t\u00eb lart\u00eb kompresimi.\n
N\u00eb liblzma \u00ebsht\u00eb rritur shpejt\u00ebsia e kodimit n\u00eb sistemet 64-bit PowerPC dhe RISC-V.\n
N\u00eb lzma\/bcj.h \u00ebsht\u00eb shtuar nj\u00eb API i nivelit t\u00eb ul\u00ebt p\u00ebr filtrat BCJ (Branch\/Call\/Jump) p\u00ebr sistemet RISC-V, ARM64 dhe x86.\n
Kodi p\u00ebr llogaritjen e CLMUL CRC p\u00ebr sistemet x86, x86-64 dhe E2K \u00ebsht\u00eb ri-shkruar.\n
N\u00eb platformat me procesor\u00eb LoongArch jan\u00eb aktivizuar instrukcionet p\u00ebr t\u00eb p\u00ebrshpejtuar llogaritjen e kontrolleve CRC32.\n
N\u00eb utilitetin \u00ebsht\u00eb siguruar thirrja e funksionit fsync() p\u00ebr t\u00eb zbrazur keqkuptimet e skedar\u00ebve p\u00ebr skedarin e rezultatit para fshirjes s\u00eb skedarit origjinal. P\u00ebr t\u00eb \u00e7aktivizuar sinkronizimin para fshirjes, \u00ebsht\u00eb implementuar opsioni .\n
N\u00eb utilitetet xz, xzdec dhe lzmainfo, gjat\u00eb daljes s\u00eb informacionit n\u00eb ekran \u00ebsht\u00eb siguruar z\u00ebvend\u00ebsimi i simboleve jo t\u00eb printueshme me nj\u00eb pik\u00ebpyetje.\n
N\u00eb xz dhe xzdec n\u00eb platform\u00ebn Linux, p\u00ebr izolimin e procesit \u00ebsht\u00eb implementuar mb\u00ebshtetje p\u00ebr versionet 5 dhe 6 t\u00eb mekanizmit Landlock.\n
\u00ebsht\u00eb shtuar nj\u00eb skenar p\u00ebr kontrollin e licencave build-aux\/license-check.sh.\n
Skripcat lzcmp, lzdiff, lzless, lzmore, lzgrep, lzegrep dhe lzfgrep, t\u00eb implementuar si mbivendosje mbi utilitetin xz, jan\u00eb shpallur t\u00eb diskriminuara. <\/ul>\n