Imininingwane emisha ishicilelwe mayelana nokugetshengwa kwengqalasizinda yesikhulumi semiyalezo esisabalalise iMatrix, esibikwe namhlanje ekuseni. Isixhumanisi esiyinkinga abahlaseli abangene ngaso kwakuwuhlelo lokuhlanganisa oluqhubekayo lwe-Jenkins, olwagqekezwa ngoMashi 13. Khona-ke, kuseva ye-Jenkins, ukungena ngemvume komunye wabalawuli, okuqondiswe kabusha yi-ejenti ye-SSH, kwavinjwa, futhi ngo-Ephreli 4, abahlaseli bathola ukufinyelela kwezinye iziphakeli zengqalasizinda.
Ngesikhathi sokuhlasela kwesibili, iwebhusayithi ye-matrix.org yaqondiswa kabusha kwenye iseva (matrixnotorg.github.io) ngoshintsho lwe-DNS, kusetshenziswa ukhiye we-API wohlelo lokulethwa kokuqukethwe lwe-Cloudflare oluvinjiwe ngesikhathi sokuhlasela kokuqala. Lapho kwakhiwa kabusha okuqukethwe amaseva Ngemva kokugenca kokuqala, abaphathi beMatrix bavuselele okhiye abasha bomuntu siqu kuphela futhi baphuthelwa ukubuyekeza ukhiye ku-Cloudflare.
Ngesikhathi sokuhlasela kwesibili, amaseva e-Matrix ahlala engathintwa; izinguquko bezikhawulelwe ekushintsheni amakheli ku-DNS kuphela. Uma umsebenzisi esevele eguqule iphasiwedi ngemuva kokuhlasela kokuqala, asikho isidingo sokuyishintsha okwesibili. Kodwa uma iphasiwedi ingakashintshwa, idinga ukubuyekezwa ngokushesha ngangokunokwenzeka, njengoba ukuvuza kwe-database ene-password hashes kuqinisekisiwe. Uhlelo lwamanje ukuqalisa inqubo yokusetha kabusha iphasiwedi ephoqelelwe ngokuzayo uma ungena ngemvume.
Ngaphezu kokuvuza kwephasiwedi, kwaqinisekiswa nokuthi okhiye be-GPG abasetshenziselwa ukukhiqiza amasignesha edijithali amaphakheji bawela ezandleni zabahlaseli. DebianIzindawo zokugcina ukukhishwa kwe-Synapse kanye ne-Riot/Web. Izinkinobho zivikelwe yiphasiwedi. Lezi zikhiye sezihoxisiwe kusukela ngaleso sikhathi. Izinkinobho zabanjwa ngomhlaka-4 Ephreli, kodwa azikho izibuyekezo ze-Synapse ezikhishwe kusukela ngaleso sikhathi. Kodwa-ke, iklayenti le-Riot/Web 1.0.7 lakhishwa (ukuhlolwa kokuqala kubonise ukuthi alizange libe sengozini).
Umhlaseli uthumele uchungechunge lwemibiko enemininingwane yokuhlaselwa kwe-GitHub, kodwa yasuswa. Nokho, imibiko yagcinwa endaweni yokugcina izinto.
Source: opennet.ru
