Lasse Collin, den gamla projektledaren f\u00f6r xz som 2022 \u00f6verl\u00e4mnade r\u00e4ttigheterna till den nya projektledaren Jia Tan, vars aktiviteter ledde till inf\u00f6randet av en bakd\u00f6rr, publicerade korrigerande versioner av paketet XZ Utils 5.2.13, 5.4.7 och 5.6.2, d\u00e4r komponenter av bakd\u00f6rren och andra misst\u00e4nkta \u00e4ndringar som lagts till genom tidigare skadlig verksamhet har tagits bort. <\/p>\n
Dessutom har en rapport om granskningen av Git-repositoriet och de \u00e4ndringar som lagts till sedan december 2022 under Jia Tans tid som projektledare publicerats. \u00c4ndringarna har analyserats p\u00e5 niv\u00e5n f\u00f6r enskilda commit. Commit i repositoriet var inte signerade med en digital signatur, men inga bevis p\u00e5 f\u00f6rfalskning fr\u00e5n committernas sida har p\u00e5tr\u00e4ffats. Totalt har 8 skadliga commits tagits bort fr\u00e5n repositoriet. <\/p>\n
Koden f\u00f6r CRC CLMUL har \u00e4nnu inte tagits bort fr\u00e5n kodbasen, vilket leder till falska positiva vid verifiering i MSAN (Memory sanitizer) och problem med OSS Fuzz. Fram\u00f6ver planeras det att denna kod ska omarbetas, men f\u00f6r tillf\u00e4llet har man beslutat att inte r\u00f6ra den f\u00f6r att undvika regressioner i gamla grenar. Inga misst\u00e4nkta \u00e4ndringar har p\u00e5tr\u00e4ffats i gamla commits som lades till f\u00f6re inf\u00f6randet av \u00e4ndringarna relaterade till bakd\u00f6rren. Separat har po-filer f\u00f6r lokalisering, metadata i tar-filer samt arkiv med releaser och \u00f6vers\u00e4ttningar granskats. <\/p>\n
\u00c4ndringar inkluderar ocks\u00e5 inf\u00f6randet av ansamlingar av buggfixar och borttagning av st\u00f6det f\u00f6r IFUNC-mekanismen, som tillhandah\u00e5lls i Glibc f\u00f6r indirekt funktionsanrop, vilket har anv\u00e4nts f\u00f6r att organisera funktionstillslag i bakd\u00f6rren. Det har noterats att anv\u00e4ndningen av IFUNC bara komplicerar koden och att prestandaf\u00f6rdelarna fr\u00e5n den \u00e4r obetydliga. Som en f\u00f6rsiktighets\u00e5tg\u00e4rd har \u00e4ven logotypen XZ, PDF-versioner av man-sidor och tv\u00e5 tester f\u00f6r arkitektur x86 och SPARC tagits bort fr\u00e5n paketet med k\u00e4llkoden, d\u00e4r objektfiler behandlades som inmatning. <\/p>\n
\u0418\u0437 \u043d\u043e\u0432\u0448\u0435\u0441\u0442\u0432 \u0432 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0449\u0438\u043a xzdec \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 4 \u0432\u0435\u0440\u0441\u0438\u0438 ABI \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Landlock. \u0412 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b Autotools \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f «—enable-doxygen», \u0430 \u0432 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 Cmake \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 ENABLE_DOXYGEN \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 API liblzma, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f Doxygen. \u0423\u0436\u0435 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u0430 \u0438\u0437 \u043f\u0430\u043a\u0435\u0442\u0430. \u041b\u0430\u0441\u0441\u0435 \u041a\u043e\u043b\u043b\u0438\u043d (Lasse Collin), \u0441\u0442\u0430\u0440\u044b\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz, \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0448\u0438\u0439 \u043f\u0440\u0430\u0432\u0430 \u043d\u043e\u0432\u043e\u043c\u0443 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 Jia Tan, \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 XZ Utils 5.2.13, 5.4.7 \u0438 5.6.2, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u044b \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0438 \u043f\u0440\u043e\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043e\u0442\u0447\u0451\u0442 \u043e \u0440\u0435\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116209","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt XZ publicerade resultaten av granskningen av commits och den f\u00f6rsta uppdateringen efter uppt\u00e4ckten av bakd\u00f6rren | ProHoster","description":"Lasse Collin, den gamla projektledaren f\u00f6r xz, \u00f6verl\u00e4mnade 2022 r\u00e4ttigheterna till den nya projektledaren Jia Tan, vars arbete ledde till inf\u00f6randet av en bakd\u00f6rr, publicerade korrigerande versioner av paketet.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 XZ \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0438 \u043f\u0435\u0440\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 | ProHoster","og:description":"\u041b\u0430\u0441\u0441\u0435 \u041a\u043e\u043b\u043b\u0438\u043d (Lasse Collin), \u0441\u0442\u0430\u0440\u044b\u0439 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 xz, \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0448\u0438\u0439 \u043f\u0440\u0430\u0432\u0430 \u043d\u043e\u0432\u043e\u043c\u0443 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u043c\u0443 Jia Tan, \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/proekt-xz-opublikoval-rezultat-audita-kommitov-i-pervoe-obnovlenie-posle-vyyavleniya-bekdora","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-05-30T13:40:12+00:00","article:modified_time":"2024-05-30T13:40:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116209","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 01:24:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:24:35","updated":"2026-01-23 01:24:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/116209","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=116209"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/116209\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=116209"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=116209"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=116209"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"