{"id":169876,"date":"2026-04-24T12:24:33","date_gmt":"2026-04-24T10:24:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-packagekit-pozvolyayushhaya-poluchit-prava-root-v-raznyh-distributivah-linux"},"modified":"2026-04-24T12:24:33","modified_gmt":"2026-04-24T10:24:33","slug":"uyazvimost-v-packagekit-pozvolyayushhaya-poluchit-prava-root-v-raznyh-distributivah-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-packagekit-pozvolyayushhaya-poluchit-prava-root-v-raznyh-distributivah-linux","title":{"rendered":"Nj\u00eb vulnerabilitet n\u00eb PackageKit, i cili lejon marrjen e t\u00eb drejtave root n\u00eb distribucione t\u00eb ndryshme Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb PackageKit, nj\u00eb nd\u00ebrfaqe D-Bus q\u00eb unifikon operacionet e menaxhimit t\u00eb paketeve, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi Pack2TheRoot (CVE-2026-41651) q\u00eb i lejon nj\u00eb p\u00ebrdoruesi pa privilegje t\u00eb instaloj\u00eb ose fshij\u00eb nj\u00eb paket\u00eb t\u00eb caktuar dhe t\u00eb arrij\u00eb qasje root n\u00eb sistem. Problemi manifeston q\u00eb nga versioni 1.0.2 (viti 2014) dhe \u00ebsht\u00eb rregulluar n\u00eb publikimin e PackageKit 1.3.5. <\/p>\n

Problemi \u00ebsht\u00eb identifikuar nga hulumtuesit e kompanis\u00eb Deutsche Telekom p\u00ebrmes modelit t\u00eb AI, Claude Opus. Nj\u00eb exploit funksional \u00ebsht\u00eb p\u00ebrgatitur, i cili vepron n\u00eb shumic\u00ebn e distribucioneve me PackageKit, por informacionet e detajuara mbi vunerabilitetin do t\u00eb publikohen m\u00eb von\u00eb, p\u00ebr t'u dh\u00ebn\u00eb p\u00ebrdoruesve koh\u00eb p\u00ebr t\u00eb p\u00ebrdit\u00ebsuar sistemet e tyre. Mund\u00ebsia e shfryt\u00ebzimit t\u00eb vunerabilitetit \u00ebsht\u00eb demonstruar n\u00eb Ubuntu Desktop 18.04\/24.04.4\/26.04, Ubuntu Server 22.04 \u2014 24.04, Debian Desktop 13.4, RockyLinux Desktop 10.1 dhe Fedora 43 Desktop\/Server. Statusi i rregullimit t\u00eb vunerabiliteteve n\u00eb distribucione mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe (n\u00ebse faqja nuk \u00ebsht\u00eb e qasshme, at\u00ebher\u00eb zhvilluesit e distribucionit ende nuk kan\u00eb filluar shqyrtimin e problemit): Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch, Fedora, FreeBSD. <\/p>\n

Dob\u00ebsia shkaktohet nga nj\u00eb gjendje e gar\u00ebs gjat\u00eb p\u00ebrpunimit t\u00eb flamujve t\u00eb transaksioneve n\u00eb procesin prapavij\u00eb t\u00eb PackageKit, i cili lejon ndryshimin e parametrave t\u00eb operacionit n\u00eb momentin midis kalimit t\u00eb autorizimit dhe fillimit t\u00eb operacionit me paket\u00ebn. Sulmuesi mund t\u00eb d\u00ebrgoj\u00eb nj\u00eb k\u00ebrkes\u00eb D-Bus p\u00ebr t\u00eb kryer nj\u00eb operacion t\u00eb lejuesh\u00ebm p\u00ebr nj\u00eb p\u00ebrdorues pa privilegje, dhe m\u00eb pas t\u00eb d\u00ebrgoj\u00eb nj\u00eb k\u00ebrkes\u00eb D-Bus t\u00eb p\u00ebrs\u00ebritur. N\u00ebse k\u00ebrkesa e p\u00ebrs\u00ebritur vjen para fillimit t\u00eb v\u00ebrtet\u00eb t\u00eb kryerjes s\u00eb operacionit t\u00eb lejuar, \u00ebsht\u00eb e mundur t\u00eb arrihet mbivendosja e flamujve t\u00eb transaksionit tashm\u00eb t\u00eb filluar dhe ndryshimi i gjendjes s\u00eb ruajtur n\u00eb cache. <\/p>\n

N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, nj\u00eb transaksion i lejuar q\u00eb \u00ebsht\u00eb filluar do t\u00eb kryhet me parametra t\u00eb ndryshuar, n\u00eb vend t\u00eb atyre origjinale, por me parametra t\u00eb p\u00ebrmbysur, t\u00eb d\u00ebrguar n\u00eb k\u00ebrkes\u00ebn e dyt\u00eb. Duke ndryshuar informacionin mbi paket\u00ebn q\u00eb do t\u00eb instalohet, mund t\u00eb instalohet \u00e7do paket\u00eb tjet\u00ebr, p\u00ebrfshir\u00eb at\u00eb q\u00eb \u00ebsht\u00eb ruajtur lokal nga sulmuesi. Instalimi i paket\u00ebs kryhet me t\u00eb drejtat root, k\u00ebshtu q\u00eb p\u00ebr t\u00eb marr\u00eb qasje root n\u00eb sistem, sulmuesi mund t\u00eb shtoj\u00eb nj\u00eb scriptlet t\u00eb tij n\u00eb paket\u00eb, i cili do t\u00eb aktivizohet automatikisht para ose pas instalimit.

\"Nj\u00eb<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 PackageKit, D-Bus-\u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0435, \u0443\u043d\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Pack2TheRoot (CVE-2026-41651), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 1.0.2 (2014 \u0433\u043e\u0434) \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 PackageKit 1.3.5. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Deutsche Telekom \u043f\u0440 \u043f\u043e\u043c\u043e\u0449\u0438 AI-\u043c\u043e\u0434\u0435\u043b\u0438 Claude Opus. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":169877,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-169876","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb PackageKit q\u00eb lejon marrjen e t\u00eb drejtave root n\u00eb distribucione t\u00eb ndryshme Linux | ProHoster","description":"N\u00eb PackageKit, shtresa D-Bus q\u00eb unifikon operacionet e menaxhimit t\u00eb paketave, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi Pack2TheRoot (CVE-2026-41651), e cila lejon nj\u00eb p\u00ebrdorues me privilegje t\u00eb ul\u00ebta t\u00eb instaloj\u00eb ose t\u00eb fshij\u00eb nj\u00eb paket\u00eb t\u00eb caktuar.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-packagekit-pozvolyayushhaya-poluchit-prava-root-v-raznyh-distributivah-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PackageKit, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux | ProHoster","og:description":"\u0412 PackageKit, D-Bus-\u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0435, \u0443\u043d\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Pack2TheRoot (CVE-2026-41651), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-packagekit-pozvolyayushhaya-poluchit-prava-root-v-raznyh-distributivah-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-24T10:24:33+00:00","article:modified_time":"2026-04-24T10:24:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/169876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=169876"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/169876\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/169877"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=169876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=169876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=169876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}