Zhvilluesit e projektit PHP paralajm\u00ebruan p\u00ebr nj\u00eb kompromis n\u00eb Git-repositorin e projektit dhe zbuluan dy komitete keqdash\u00ebse, t\u00eb shtuar m\u00eb 28 mars n\u00eb repositorin php-src n\u00eb em\u00ebr t\u00eb Rasmus Lerdorf, themeluesit t\u00eb PHP, dhe Nikita Popov, nj\u00eb nga zhvilluesit kryesor\u00eb t\u00eb PHP. <\/p>\n
Duke qen\u00eb se nuk ka siguri p\u00ebr besueshm\u00ebrin\u00eb e serverit ku ishte vendosur Git-repositorit, zhvilluesit vendos\u00ebn se mbajtja e infrastruktur\u00ebs Git me forcat e tyre krijonte rreziqe t\u00eb tjera sigurie dhe e transferuan repositorin standard n\u00eb platform\u00ebn GitHub, e cila propozohet t\u00eb p\u00ebrdoret si primare. T\u00eb gjitha ndryshimet tani duhet t\u00eb d\u00ebrgohen n\u00eb GitHub, jo n\u00eb git.php.net, duke p\u00ebrfshir\u00eb zhvillimin q\u00eb tani mund t\u00eb p\u00ebrdor\u00eb nd\u00ebrfaqen web t\u00eb GitHub. <\/p>\n
N\u00eb commit-in e par\u00eb t\u00eb d\u00ebmsh\u00ebm, i maskuar si nj\u00eb korrigjim p\u00ebr nj\u00eb gabim n\u00eb skedarin ext\/zlib\/zlib.c, u b\u00eb nj\u00eb ndryshim q\u00eb aktivizonte kodin PHP t\u00eb d\u00ebrguar n\u00eb header-in HTTP User Agent, n\u00ebse p\u00ebrmbajtja fillonte me fjal\u00ebn \u201czerodium\u201d. Pasi zhvilluesit e vun\u00eb re k\u00ebt\u00eb ndryshim t\u00eb d\u00ebmsh\u00ebm dhe e anuluan at\u00eb, n\u00eb depo u shfaq nj\u00eb commit i dyt\u00eb q\u00eb anuloj veprimin e zhvilluesve t\u00eb PHP dhe ktheu ndryshimin e d\u00ebmsh\u00ebm. <\/p>\n
N\u00eb kodin e shtuar ka nj\u00eb rresht \"REMOVETHIS: e shitur p\u00ebr zerodium, mes 2017\", i cili mund t\u00eb sugjeroj\u00eb se q\u00eb nga viti 2017 ka nj\u00eb ndarje t\u00eb tjera t\u00eb d\u00ebmshme, e maskuar m\u00eb mir\u00eb, ose nj\u00eb dob\u00ebsi t\u00eb paq\u00ebndrueshme, e cila \u00ebsht\u00eb shitur kompanis\u00eb Zerodium, q\u00eb merret me blerjen e dob\u00ebsive 0-day (kompania Zerodium p\u00ebrgjigjej se nuk ka bler\u00eb informacion n\u00eb lidhje me ndjeshm\u00ebrin\u00eb n\u00eb PHP). <\/p>\n
Aktualisht nuk ka informacione t\u00eb detajuara p\u00ebr incidentin, dhe supozohet vet\u00ebm se ndryshimet ishin shtuar si rezultat i hack-imit n\u00eb git.php.net, dhe jo si rezultat i komprometimit t\u00eb llogarive individuale t\u00eb zhvilluesve. Ka filluar analiza e repositorit p\u00ebr t\u00eb zbuluar ndryshime t\u00eb tjera keqdash\u00ebse p\u00ebrve\u00e7 problemeve t\u00eb zbuluara. T\u00eb gjith\u00eb ata q\u00eb d\u00ebshirojn\u00eb jan\u00eb t\u00eb ftuar t\u00eb rishikojn\u00eb, dhe n\u00ebse d\u00ebshmojn\u00eb ndryshime t\u00eb dyshimta, duhet t\u00eb d\u00ebrgojn\u00eb informacionin n\u00eb security@php.net. server\u00eb<\/a> git.php.net, dhe jo komprometimi i llogarive individuale t\u00eb zhvilluesve. Ka filluar analiza e repositorit p\u00ebr t\u00eb k\u00ebrkuar t\u00eb tjera ndryshime keqdash\u00ebse p\u00ebrve\u00e7 atyre t\u00eb zbuluara. T\u00eb gjith\u00eb ata q\u00eb d\u00ebshirojn\u00eb jan\u00eb t\u00eb ftuar t\u00eb rishikojn\u00eb, dhe n\u00ebse zbulojn\u00eb ndryshime t\u00eb dyshimta, duhet t\u00eb d\u00ebrgojn\u00eb informacionin n\u00eb security@php.net. <\/p>\n Sa i p\u00ebrket kalimit n\u00eb GitHub, p\u00ebr t\u00eb marr\u00eb akses p\u00ebr t\u00eb shkruar n\u00eb depo-n e re, an\u00ebtar\u00ebt e zhvillimit duhet t\u00eb b\u00ebhen pjes\u00eb e organizat\u00ebs PHP. Ata q\u00eb nuk jan\u00eb pjes\u00eb e zhvilluesve t\u00eb PHP n\u00eb GitHub duhet t\u00eb kontaktojn\u00eb Nikita Popov p\u00ebr email n\u00eb nikic@php.net. Nj\u00eb k\u00ebrkes\u00eb e detyrueshme p\u00ebr shtimin \u00ebsht\u00eb aktivizimi i autenticitetit me dy faktor\u00eb. Pasi t\u00eb ken\u00eb marr\u00eb t\u00eb drejtat e duhura, p\u00ebr t\u00eb ndryshuar depo-n mjafton t\u00eb ekzekutohet komand\u00ebn \"git remote set-url origin git@github.com:php\/php-src.git\". Gjithashtu, po shqyrtohet kalimi n\u00eb verifikimin e detyruesh\u00ebm t\u00eb komiteteve me n\u00ebnshkrim digjital t\u00eb zhvilluesit. K\u00ebtu propozohet gjithashtu t\u00eb ndalohet shtimi direkt i ndryshimeve q\u00eb nuk kan\u00eb kaluar nj\u00eb shqyrtim t\u00eb m\u00ebparsh\u00ebm. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 PHP \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0434\u0432\u0443\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 28 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 php-src \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0420\u0430\u0441\u043c\u0443\u0441\u0430 \u041b\u0435\u0440\u0434\u043e\u0440\u0444\u0430, \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044f PHP, \u0438 \u041d\u0438\u043a\u0438\u0442\u044b \u041f\u043e\u043f\u043e\u0432\u0430, \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 PHP. \u0422\u0430\u043a \u043a\u0430\u043a \u043d\u0435\u0442 \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u0448\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 Git-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0438\u0441\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99606","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jan\u00eb zbuluar ndryshime keqdash\u00ebse n\u00eb depozitarin Git t\u00eb projektit PHP | ProHoster","description":"Zhvilluesit e projektit PHP paralajm\u00ebruan p\u00ebr komprometimin e depozitarit Git t\u00eb projektit dhe p\u00ebr zbulimin e dy komiteteve keqdash\u00ebse, t\u00eb shtuar m\u00eb 28 mars n\u00eb depozitarin php-src n\u00eb em\u00ebr t\u00eb Rasmush Lerdorfit, themeluesit t\u00eb PHP, dhe Nikit\u00ebs.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-git-repozitorii-proekta-php-vyyavleny-vredonosnye-izmeneniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 PHP \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 PHP \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0434\u0432\u0443\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 28 \u043c\u0430\u0440\u0442\u0430 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 php-src \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0420\u0430\u0441\u043c\u0443\u0441\u0430 \u041b\u0435\u0440\u0434\u043e\u0440\u0444\u0430, \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044f PHP, \u0438 \u041d\u0438\u043a\u0438\u0442\u044b.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-git-repozitorii-proekta-php-vyyavleny-vredonosnye-izmeneniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-29T20:22:34+00:00","article:modified_time":"2021-03-29T20:22:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99606","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-29 20:30:58","updated":"2026-02-22 15:29:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=99606"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99606\/revisions"}],"predecessor-version":[{"id":162210,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99606\/revisions\/162210"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=99606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=99606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=99606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"