Jan\u00eb publikuar informacione p\u00ebr 21 vulnerabilitete n\u00eb bootloader-in GRUB2, shumica e t\u00eb cilave \u00e7ojn\u00eb n\u00eb mbushjen e tampon\u00ebve dhe mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb anashkaluar mekanizmin e verifikimit t\u00eb ngarkes\u00ebs UEFI Secure Boot. Problemet jan\u00eb zgjidhur deri tani vet\u00ebm n\u00eb form\u00ebn e patches. Statusi i zgjidhjes s\u00eb vulnerabiliteteve n\u00eb distribucione mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Debian, Ubuntu, SUSE, RHEL, Fedora. P\u00ebr t\u00eb adresuar problemet n\u00eb GRUB2, mjafton vet\u00ebm t\u00eb p\u00ebrdit\u00ebsohet paketa, por \u00ebsht\u00eb gjithashtu e nevojshme t\u00eb krijohen n\u00ebnshkrime digjitale t\u00eb reja dhe t\u00eb p\u00ebrdit\u00ebsohen instaluesit, bootloader-\u00ebt, paketat e b\u00ebrtham\u00ebs, firmware-t fwupd dhe shtresat shim. <\/p>\n
Vulnerabilitetet e identifikuara: <\/p>\n
N\u00eb shumic\u00ebn e distribucioneve Linux, p\u00ebr ngarkimin e verifikuar n\u00eb modalitetin UEFI Secure Boot p\u00ebrdoret nj\u00eb shtres\u00eb e vog\u00ebl shim, e verifikuar me n\u00ebnshkrim digjital nga Microsoft. Kjo shtres\u00eb vler\u00ebson GRUB2 me certifikat\u00ebn e vet, q\u00eb u lejon zhvilluesve t\u00eb distribucioneve t\u00eb mos e verifikojn\u00eb \u00e7do p\u00ebrdit\u00ebsim t\u00eb bllokut dhe GRUB n\u00eb Microsoft. Vulnerabilitetet n\u00eb GRUB2 lejojn\u00eb ekzekutimin e kodit t\u00eb tyre pas verifikimit t\u00eb suksessh\u00ebm t\u00eb shim, por para ngarkimit t\u00eb sistemit operacional, duke u futur n\u00eb zinxhirin e besimit me modulin Secure Boot aktiv dhe duke fituar kontroll t\u00eb plot\u00eb mbi procesin e ngarkimit, p\u00ebr shembull, p\u00ebr ngarkimin e nj\u00eb sistemi tjet\u00ebr operativ, modifikimin e komponenteve t\u00eb sistemit operativ dhe anashkalimin e mbrojtjes Lockdown. <\/p>\n
P\u00ebr t\u00eb bllokuar vulnerabilitetin pa t\u00ebrheqjen e n\u00ebnshkrimit dixhital, shp\u00ebrndarjet mund t\u00eb p\u00ebrdorin mekanizmin SBAT (UEFI Secure Boot Advanced Targeting), mb\u00ebshtetje e t\u00eb cilit \u00ebsht\u00eb zbatuar p\u00ebr GRUB2, shim dhe fwupd n\u00eb shumic\u00ebn e shp\u00ebrndarjeve t\u00eb njohura Linux. SBAT-u \u00ebsht\u00eb zhvilluar n\u00eb bashk\u00ebpunim me Microsoft dhe n\u00ebnkupton shtimin n\u00eb skedar\u00ebt ekzekutiv\u00eb t\u00eb komponent\u00ebve UEFI t\u00eb metadatat shtes\u00eb, t\u00eb cilat p\u00ebrfshijn\u00eb informacionin mbi prodhuesin, produktin, komponentin dhe versionin. Metaet e p\u00ebrmendura n\u00ebnshkruhen me nj\u00eb n\u00ebnshkrim dixhital dhe mund t\u00eb p\u00ebrfshihen ve\u00e7mas n\u00eb listat e lejuara ose t\u00eb ndaluara t\u00eb komponent\u00ebve p\u00ebr UEFI Secure Boot. <\/p>\n
SBAT lejon q\u00eb t\u00eb bllokoni p\u00ebrdorimin e n\u00ebnshkrimit digjital p\u00ebr numra t\u00eb ve\u00e7ant\u00eb versioni t\u00eb komponenteve pa pasur nevoj\u00eb t\u00eb revokoni \u00e7el\u00ebsat p\u00ebr Secure Boot. Bllokimi i dob\u00ebsive p\u00ebrmes SBAT nuk k\u00ebrkon p\u00ebrdorimin e listes s\u00eb certifikatatve t\u00eb revokuara UEFI (dbx), dhe realizohet n\u00eb nivelin e nd\u00ebrrimit t\u00eb \u00e7el\u00ebsit t\u00eb brendsh\u00ebm p\u00ebr formimin e n\u00ebnshkrimeve dhe p\u00ebrdit\u00ebsimin e GRUB2, shim dhe artefakteve t\u00eb ngarkes\u00ebs t\u00eb ofruara nga shp\u00ebrndarjet e tjera. Para zbatimit t\u00eb SBAT, p\u00ebrdit\u00ebsimi i listes s\u00eb certifikatatve t\u00eb revokuara (dbx, UEFI Revocation List) ishte nj\u00eb kusht i domosdosh\u00ebm p\u00ebr bllokimin e plot\u00eb t\u00eb dob\u00ebsis\u00eb, pasi nj\u00eb sulmues, pavar\u00ebsisht sistemit operativ t\u00eb p\u00ebrdorur, mund t\u00eb p\u00ebrdorte nj\u00eb media ngarkese me nj\u00eb version t\u00eb vjet\u00ebr dhe t\u00eb dob\u00ebt t\u00eb GRUB2, t\u00eb v\u00ebrtetuar me n\u00ebnshkrim digjital. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e 21 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0438\u0434\u0435 \u043f\u0430\u0442\u0447\u0430. \u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, SUSE, RHEL, Fedora. \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 GRUB2 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-122049","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 N\u00eb ngarkuesin GRUB2 jan\u00eb identifikuar 21 vulnerabilitete | ProHoster","description":"Jan\u00eb publikuar informacione p\u00ebr 21 vulnerabilitete n\u00eb ngarkuesin GRUB2, shumica e t\u00eb cilave \u00e7ojn\u00eb n\u00eb mbushje t\u00eb tamponit dhe mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb anashkaluar mekanizmin e verifikimit t\u00eb ngarkimit UEFI Secure Boot. Problemet jan\u00eb zgjidhur deri tani vet\u00ebm n\u00eb form\u00ebn e patches. Statusi i zgjidhjes s\u00eb vulnerabiliteteve n\u00eb distribucione mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe: Debian, Ubuntu, SUSE, RHEL, Fedora. P\u00ebr t\u00eb zgjidhur problemet n\u00eb GRUB2, thjesht","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-zagruzchike-grub2-vyyavlena-21-uyazvimost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 21 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e 21 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u043a\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0432\u0438\u0434\u0435 \u043f\u0430\u0442\u0447\u0430. \u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, SUSE, RHEL, Fedora. \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 GRUB2 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-zagruzchike-grub2-vyyavlena-21-uyazvimost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-02-22T00:22:05+00:00","article:modified_time":"2025-02-22T00:22:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"122049","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 10:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 10:50:19","updated":"2026-01-23 10:50:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/122049","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=122049"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/122049\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=122049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=122049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=122049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"