{"id":138218,"date":"2025-06-25T17:11:58","date_gmt":"2025-06-25T15:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-paketnyh-menedzherah-nix-lix-i-guix"},"modified":"2025-06-25T17:11:58","modified_gmt":"2025-06-25T15:11:58","slug":"uyazvimosti-v-paketnyh-menedzherah-nix-lix-i-guix","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-paketnyh-menedzherah-nix-lix-i-guix","title":{"rendered":"Vulnerabilitetet n\u00eb menaxher\u00ebt e paketave Nix, Lix dhe Guix","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb menaxher\u00ebt e paketave GNU Guix, Nix dhe Lix jan\u00eb identifikuar dob\u00ebsi (Nix, Guix, Lix) q\u00eb lejojn\u00eb ekzekutimin e kodit me t\u00eb drejtat e p\u00ebrdoruesve n\u00ebn t\u00eb cil\u00ebt ekzekutohen detyrat e nd\u00ebrtimit (p.sh., nixbld* n\u00eb Nix\/Lix), e cila mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shkruar t\u00eb dh\u00ebnat e veta n\u00eb mjedisin e nd\u00ebrtimit dhe p\u00ebr t\u00eb b\u00ebr\u00eb ndryshime n\u00eb procesin e nd\u00ebrtimit. Problemet jan\u00eb t\u00eb pranishme n\u00eb proceset n\u00eb sfond guix-daemon dhe nix-daemon, t\u00eb aplikuara p\u00ebr t\u00eb organizuar qasjen e p\u00ebrdoruesve t\u00eb paautorizuar n\u00eb operacionet e nd\u00ebrtimit. <\/p>\n

Dob\u00ebsit\u00eb shkaktohen nga fakti se gjat\u00eb kryerjes s\u00eb disa operacioneve p\u00ebr t\u00eb aksesuar katalog\u00ebt p\u00ebrmbledh\u00ebs t\u00eb p\u00ebrkohsh\u00ebm jan\u00eb p\u00ebrdorur rrug\u00eb t\u00eb plota skedar\u00ebsh, n\u00eb vend t\u00eb p\u00ebrshkruesve dirfd, \u00e7ka lejonte q\u00eb t\u00eb z\u00ebvend\u00ebsohej katalogu p\u00ebrmbledh\u00ebs, i vendosur n\u00eb hierarkin\u00eb \/tmp (p.sh., «\/tmp\/guix-build-PACKAGE-X.Y.drv-0»). P\u00ebrdorimi i gabuar i dirfd n\u00eb funksionin e fshirjes rekursive \u00e7oi n\u00eb nj\u00eb gjendje garuese, duke e b\u00ebr\u00eb t\u00eb mundur q\u00eb nj\u00eb sulmues t\u00eb fus\u00eb nj\u00eb lidhje simbolike n\u00eb momentin midis krijimit dhe ndryshimit t\u00eb pronarit t\u00eb katalogut p\u00ebrmbledh\u00ebs. N\u00ebse sulmi \u00ebsht\u00eb i suksessh\u00ebm, guix-daemon\/nix-daemon n\u00eb vend q\u00eb t\u00eb ndryshonte p\u00ebrdoruesin p\u00ebr katalogun p\u00ebrmbledh\u00ebs, nd\u00ebrronte pronarin p\u00ebr skedarin q\u00eb adresoheshin nga lidhja simbolike. <\/p>\n

Dob\u00ebsit\u00eb jan\u00eb eliminuar n\u00eb p\u00ebrdit\u00ebsimet Lix 2.93, Nix 2.29 dhe Guix 1.4.0-38.0e79d5b. P\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb, sulmuesi duhet t\u00eb ket\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb ekzekutuar pun\u00eb t\u00eb rast\u00ebsishme nd\u00ebrtimi. P\u00ebr nj\u00eb sulm duke p\u00ebrdorur dob\u00ebsin\u00eb CVE-2025-46415, mjafton t\u00eb ket\u00eb mund\u00ebsin\u00eb e krijimit t\u00eb skedar\u00ebve n\u00eb katalogun \/tmp n\u00eb makin\u00ebn e nd\u00ebrtimit, nd\u00ebrsa p\u00ebr dob\u00ebsin\u00eb CVE-2025-46416 \u00ebsht\u00eb e nevojshme q\u00eb t\u00eb ket\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb ekzekutuar kod n\u00eb kontekstin e hap\u00ebsir\u00ebs kryesore t\u00eb identifikator\u00ebve t\u00eb p\u00ebrdoruesve (pid namespace) dhe rrjetit (network namespace).
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 GNU Guix, Nix \u0438 Lix \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u0438\u043e\u0441\u0442\u0438 (Nix, Guix, Lix), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, nixbld* \u0432 Nix\/Lix), \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0432\u043e\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u0444\u043e\u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445 guix-daemon \u0438 nix-daemon, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-138218","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsit\u00eb n\u00eb menaxher\u00ebt e paketave Nix, Lix dhe Guix | ProHoster","description":"N\u00eb menaxher\u00ebt e paketave GNU Guix, Nix dhe Lix jan\u00eb identifikuar dob\u00ebsi (Nix, Guix, Lix) q\u00eb lejojn\u00eb ekzekutimin e kodit me t\u00eb drejtat e p\u00ebrdoruesve n\u00ebn t\u00eb cil\u00ebt ekzekutohen detyrat e nd\u00ebrtimit (p.sh., nixbld* n\u00eb Nix\/Lix), e cila mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb shkruar t\u00eb dh\u00ebnat e veta n\u00eb mjedisin e nd\u00ebrtimit dhe p\u00ebr t\u00eb b\u00ebr\u00eb ndryshime n\u00eb procesin e nd\u00ebrtimit. Problemet jan\u00eb t\u00eb pranishme n\u00eb proceset n\u00eb sfond guix-daemon dhe nix-daemon, t\u00eb aplikuara p\u00ebr t\u00eb organizuar","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-paketnyh-menedzherah-nix-lix-i-guix","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 Nix, Lix \u0438 Guix | ProHoster","og:description":"\u0412 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 GNU Guix, Nix \u0438 Lix \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u0438\u043e\u0441\u0442\u0438 (Nix, Guix, Lix), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, nixbld* \u0432 Nix\/Lix), \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0432\u043e\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u0444\u043e\u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445 guix-daemon \u0438 nix-daemon, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-paketnyh-menedzherah-nix-lix-i-guix","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-06-25T15:11:58+00:00","article:modified_time":"2025-06-25T15:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"138218","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 13:28:33","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:28:33","updated":"2026-01-23 13:28:33"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/138218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=138218"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/138218\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=138218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=138218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=138218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}