Compania Qualys ka zbuluar nj\u00eb dob\u00ebsi (CVE-2026-3888) n\u00eb organizimin e pun\u00ebs s\u00eb lidhjes snap-confine dhe systemd-tmpfiles n\u00eb Ubuntu, e cila lejon nj\u00eb p\u00ebrdorues jo i privilegjuar t\u00eb fitoj\u00eb qasje root n\u00eb sistem. Problemi shfaqet n\u00eb Ubuntu n\u00eb konfigurimin e paracaktuar q\u00eb nga versioni 24.04. N\u00eb Ubuntu 16.04-22.04, dob\u00ebsia mund t\u00eb shfryt\u00ebzohet n\u00eb konfigurime jo standarde q\u00eb imitojn\u00eb sjelljen e versioneve m\u00eb t\u00eb reja t\u00eb distribucionit. N\u00eb Ubuntu, rregullimi \u00ebsht\u00eb i disponuesh\u00ebm n\u00eb azhurnimin e paket\u00ebs snapd t\u00eb djesh\u00ebm. Problemi n\u00eb snapd \u00ebsht\u00eb eliminuar n\u00eb azhurnimin 2.75. <\/p>\n
Dob\u00ebsia ndodh si rezultat i nd\u00ebrveprimit t\u00eb pap\u00ebrshtatsh\u00ebm t\u00eb utilitar\u00ebve snap-confine dhe systemd-tmpfiles, t\u00eb kryera me privilegje t\u00eb larta. Utilitari snap-confine krijon nj\u00eb ambient sandbox p\u00ebr ekzekutimin e aplikacioneve snap, nd\u00ebrsa systemd-tmpfiles kryen pastrimin automatizuar t\u00eb skedar\u00ebve dhe dosjeve t\u00eb p\u00ebrkohshme. Sipas parazgjedhjes, utilitari systemd-tmpfiles \u00ebsht\u00eb i konfiguruar p\u00ebr t\u00eb fshir\u00eb t\u00eb gjitha skedar\u00ebt dhe dosjet e vjetra n\u00eb \/tmp, t\u00eb cilat mund t\u00eb p\u00ebrdoren nga sulmuesi p\u00ebr t\u00eb z\u00ebvend\u00ebsuar dosjen \/tmp\/.snap n\u00eb momentin pas fshirjes nga utilitari systemd-tmpfiles, por para rind\u00ebrtimit nga ekipi snap-confine. <\/p>\n
Sulmi p\u00ebrfshin pritjen e fillimit t\u00eb procesit t\u00eb pastrimit t\u00eb skedar\u00ebve temporar\u00eb, z\u00ebvend\u00ebsimin e drejtoris\u00eb \/tmp\/.snap pas fshirjes s\u00eb saj dhe vendosjen e nj\u00eb kopje t\u00eb modifikuar t\u00eb bibliotekave \/tmp\/.snap\/usr\/lib\/x86_64-linux-gnu.exchange. Sulmuesit mund t'i duhen disa dit\u00eb zgjatje para se t\u00eb filloj\u00eb systemd-tmpfiles, pasi n\u00eb Ubuntu 24.04 procesi i pastrimit fillon nj\u00eb her\u00eb n\u00eb 10 dit\u00eb, nd\u00ebrsa n\u00eb versionet m\u00eb t\u00eb reja - nj\u00eb her\u00eb n\u00eb 30 dit\u00eb. Pas z\u00ebvend\u00ebsimit t\u00eb drejtoris\u00eb, sulmuesi arrin t\u00eb inicializoj\u00eb nj\u00eb ambient t\u00eb ri sandbox duke p\u00ebrdorur snap-confine. <\/p>\n
Gjat\u00eb formimit t\u00eb p\u00ebrmbajtjes s\u00eb ambientit sandbox n\u00eb dosjen p\u00ebrkohshme \/tmp\/.snap, sulmuesi pret momentin e duhur dhe rinom\u00ebron \/tmp\/.snap\/usr\/lib\/x86_64-linux-gnu.exchange n\u00eb \/tmp\/.snap\/usr\/lib\/x86_64-linux-gnu, duke z\u00ebvend\u00ebsuar k\u00ebshtu bibliotekat dhe duke siguruar montimin e tyre me bind t\u00eb drejtat root. K\u00ebshtu, sulmuesi merr kontrollin mbi bibliotekat e ndara dhe ngarkuesin ld.so q\u00eb ekzekutohen n\u00eb ambientin sandbox snap, dhe mund t\u00eb arrij\u00eb ekzekutimin e kodit t\u00eb rast\u00ebsish\u00ebm me privilegje root p\u00ebrmes nisjes s\u00eb \u00e7do programi suid, n\u00eb t\u00eb cilin aplikohet lidhja dinamike. <\/p>\n
Duke pasur akses root n\u00eb ambientin sandbox, i izoluar p\u00ebrmes AppArmor dhe filtrit t\u00eb thirrjeve sistemore t\u00eb bazuara n\u00eb seccomp, sulmuesi mund t\u00eb kopjoj\u00eb \/bin\/bash n\u00eb drejtorin\u00eb \/var\/snap\/$SNAP\/common dhe t'i jepet atij t\u00eb drejtat \u00ab04755\u00bb (suid root). Megjith\u00ebse t\u00eb drejtat jan\u00eb modifikuar brenda ambientit sandbox, skedari me t\u00eb drejtat e modifikuara \u00ebsht\u00eb gjithashtu i aksesuesh\u00ebm n\u00eb sistemin kryesor, prandaj p\u00ebr t\u00eb marr\u00eb qasje t\u00eb plot\u00eb root \u00ebsht\u00eb e mjaftueshme t\u00eb ekzekutohet \/var\/snap\/\/common\/bash nga nj\u00eb p\u00ebrdorues i zakonsh\u00ebm pa privilegje n\u00eb mjedisin standard sistemor. <\/p>\n
Gjat\u00ebsisht u zbulua nj\u00eb dob\u00ebsi n\u00eb mjetin uutils coreutils (Rust Coreutils), nj\u00eb alternativ\u00eb e paket\u00ebs GNU Coreutils, e shkruar n\u00eb gjuh\u00ebn Rust. Dob\u00ebsia lejon q\u00eb nj\u00eb p\u00ebrdorues pa privilegje t\u00eb fitoj\u00eb t\u00eb drejtat root n\u00eb sistem. Problemi u identifikua gjat\u00eb procesit t\u00eb rishikimit t\u00eb ndryshimeve n\u00eb Ubuntu 25.10 dhe u zgjidh n\u00eb m\u00ebnyr\u00eb anashkalimi para publikimit t\u00eb Ubuntu 25.10 p\u00ebrmes dor\u00ebzimit t\u00eb \/usr\/bin\/gnurm n\u00eb vend t\u00eb uutils rm. N\u00eb paket\u00ebn uutils, problemi u zgjidh n\u00eb publikimin e uutils coreutils 0.3.0, pa sh\u00ebnim n\u00eb list\u00ebn e ndryshimeve p\u00ebr zgjidhjen e dob\u00ebsis\u00eb (u caktua se n\u00eb rm, du, chmod dhe chgrp ishte implementuar nj\u00eb metod\u00eb e sigurt p\u00ebr anashkalimin e rrug\u00ebve). <\/p>\n
Problemi \u00ebsht\u00eb shkaktuar nga nj\u00eb gjendje gar\u00eb n\u00eb utilitarin \u00abrm\u00bb, e cila i lejon nj\u00eb p\u00ebrdoruesi lokal t\u00eb z\u00ebvend\u00ebsoj\u00eb p\u00ebrmbajtjen e drejtoris\u00eb me nj\u00eb link simbolik gjat\u00eb fshirjes s\u00eb nj\u00eb skedari n\u00ebn kontrollin e p\u00ebrdoruesit nga procesi \u00abrm\u00bb me t\u00eb drejta root. P\u00ebrve\u00e7 k\u00ebsaj, dob\u00ebsia mund t\u00eb shfryt\u00ebzohet gjat\u00eb ekzekutimit t\u00eb p\u00ebrditsh\u00ebm nga skripti cron \/etc\/cron.daily\/apport, i cili ekzekutohet me t\u00eb drejta root dhe heq n\u00eb m\u00ebnyr\u00eb rekursive p\u00ebrmbajtjen e drejtoris\u00eb \/var\/crash, e cila \u00ebsht\u00eb e shkruar e hapur p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit n\u00eb sistem. <\/p>\n
Gjat\u00eb heqjes rekursive t\u00eb katalogjeve, utilitari rm fillimisht kontrollon t\u00eb gjith\u00eb katalog\u00ebt dhe m\u00eb pas i heq ata nj\u00eb nga nj\u00eb n\u00eb rendin e kund\u00ebrt, duke thirrur funksionin rmdir(). Nese arrin t\u00eb z\u00ebvend\u00ebsosh katalogun prind me nj\u00eb lidhje simbolike menj\u00ebher\u00eb pas kontrollit t\u00eb k\u00ebtij katalogu, por para kontrollit t\u00eb katalog\u00ebve t\u00eb f\u00ebmij\u00ebve brenda tij, operacioni do t\u00eb \u00e7oj\u00eb n\u00eb heqjen e katalogut q\u00eb tregon lidhja simbolike. K\u00ebshtu \u00ebsht\u00eb e mundur t\u00eb arrihet jo vet\u00ebm heqja e \u00e7do skedari n\u00eb sistem, por edhe rritja e privilegjeve p\u00ebrmes heqjes s\u00eb katalogut \/tmp\/snap-private-tmp\/$SNAP\/tmp\/.snap p\u00ebr t\u00eb z\u00ebvend\u00ebsuar p\u00ebrmbajtjen e mjedisit sandbox t\u00eb snap-paket\u00ebs (metoda e fitimit t\u00eb root \u00ebsht\u00eb e ngjashme me dob\u00ebsin\u00eb e par\u00eb). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-3888) \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0432\u044f\u0437\u043a\u0438 snap-confine \u0438 systemd-tmpfiles \u0432 Ubuntu, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 Ubuntu \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 24.04. \u0412 Ubuntu 16.04-22.04 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430. \u0412 Ubuntu \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432\u043e \u0432\u0447\u0435\u0440\u0430\u0448\u043d\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-165172","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Cenueshm\u00ebria n\u00eb snapd dhe Rust Coreutils, q\u00eb lejon fitimin e privilegjeve root n\u00eb Ubuntu | ProHoster","description":"Kompania Qualys identifikoi nj\u00eb cenueshm\u00ebri (CVE-2026-3888) n\u00eb organizimin e pun\u00ebs s\u00eb dyshes snap-confine dhe systemd-tmpfiles n\u00eb Ubuntu, q\u00eb lejon nj\u00eb p\u00ebrdorues t\u00eb pap\u00ebrgjegjsh\u00ebm t\u00eb fitoj\u00eb akses root n\u00eb sistem.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-snapd-i-rust-soreutils-pozvolyayushhie-poluchit-root-privilegii-v-ubuntu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 snapd \u0438 Rust \u0421oreutils, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Ubuntu | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Qualys \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-3888) \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0432\u044f\u0437\u043a\u0438 snap-confine \u0438 systemd-tmpfiles \u0432 Ubuntu, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-snapd-i-rust-soreutils-pozvolyayushhie-poluchit-root-privilegii-v-ubuntu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-03-18T15:12:13+00:00","article:modified_time":"2026-03-18T15:12:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/165172","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=165172"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/165172\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=165172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=165172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=165172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"