Zhvilluesit e Fedora Linux sqaruan situat\u00ebn lidhur me skadimin n\u00eb fund t\u00eb qershorit t\u00eb certifikat\u00ebs Microsoft, e cila p\u00ebrdoret p\u00ebr t\u00eb garantuar n\u00ebnshkrimin dixhital t\u00eb shtres\u00ebs Shim, e cila sh\u00ebrben p\u00ebr ngarkimin e verifikuar t\u00eb shp\u00ebrndarjeve Linux n\u00eb modalitetin UEFI Secure Boot. Kalimi n\u00eb certifikat\u00ebn e re duhet t\u00eb ndodhi pa u v\u00ebn\u00eb re nga p\u00ebrdoruesit, pasi n\u00eb t\u00eb v\u00ebrtet\u00eb p\u00ebrfundimi i koh\u00ebzgjatjes s\u00eb certifikat\u00ebs do t\u00eb \u00e7oj\u00eb vet\u00ebm n\u00eb pamund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb saj p\u00ebr t\u00eb krijuar n\u00ebnshkrime t\u00eb reja. Gjat\u00eb ngarkimit n\u00eb UEFI Secure Boot, koh\u00ebzgjatja e certifikat\u00ebs nuk verifikohet dhe ka r\u00ebnd\u00ebsi vet\u00ebm anullimi i certifikatave t\u00eb komprometuara. <\/p>\n
Sistemat ekzistuese pa instalimin e p\u00ebrdit\u00ebsimit shim do t\u00eb vazhdojn\u00eb t\u00eb ngarkohen deri n\u00eb momentin e fshirjes s\u00eb \u00e7el\u00ebsit publik t\u00eb certifikat\u00ebs nga firmware ose derisa t\u00eb vendoset n\u00eb list\u00ebn e certifikatave t\u00eb t\u00ebrhequra UEFI (DBX). \u00c7el\u00ebsi i Microsoft-it siguron vet\u00ebm shtres\u00ebn ngarkoese shim, n\u00eb t\u00eb cil\u00ebn ndodhet \u00e7el\u00ebsi publik i distribuimit, q\u00eb p\u00ebrdoret p\u00ebr t\u00eb garantuar komponent\u00ebt e ngarkuesh\u00ebm, si\u00e7 jan\u00eb ngarkuesi GRUB2, b\u00ebrthama Linux, modulet e b\u00ebrtham\u00ebs dhe proceset e tjera t\u00eb p\u00ebrdorura gjat\u00eb ngarkes\u00ebs, si\u00e7 \u00ebsht\u00eb fwupd. Ky qasje lejon q\u00eb Microsoft t\u00eb garantuar vet\u00ebm ndryshimet n\u00eb shtres\u00ebn shim dhe t\u00eb siguroj\u00eb vet\u00eb verifikimin e procesit t\u00eb ngarkes\u00ebs s\u00eb distribuimit.<\/p>\n
Certifikata Microsoft p\u00ebr verifikimin e firmware-ve t\u00eb pal\u00ebve t\u00eb treta p\u00ebr UEFI Secure Boot \u00ebsht\u00eb n\u00eb fuqi q\u00eb nga viti 2011. N\u00eb vitin 2023, iu vendos nj\u00eb certifikat\u00eb e re, e cila do t\u00eb p\u00ebrdoret p\u00ebr t\u00eb krijuar n\u00ebnshkrime nga tetori i vitit 2025. Nj\u00eb shim i p\u00ebrdit\u00ebsuar, i certifikuar me disa \u00e7el\u00ebsa p\u00ebr t\u00eb siguruar maksimalisht pajtueshm\u00ebrin\u00eb me pajisjet, \u00ebsht\u00eb tashm\u00eb shtuar n\u00eb depo Fedora Rawhide, mbi t\u00eb cilin formohet l\u00efbrari Fedora 45 (mund t\u00eb p\u00ebrdoret si n\u00eb firmware-t e vjetra pa \u00e7el\u00ebsin publik t\u00eb certifikat\u00ebs s\u00eb re, ashtu edhe n\u00eb firmware-t pa \u00e7el\u00ebsin publik t\u00eb certifikat\u00ebs s\u00eb vjet\u00ebr).<\/p>\n
Megjith\u00ebse skadimi i certifikat\u00ebs Microsoft nuk duhet t\u00eb ndikon n\u00eb funksionimin e ngarkes\u00ebs, zhvilluesit e Fedora rekomandojn\u00eb q\u00eb p\u00ebrdoruesit t\u00eb azhurnojn\u00eb baz\u00ebn e t\u00eb dh\u00ebnave me \u00e7el\u00ebsat p\u00ebr Secure Boot kur t\u00eb dalin versione t\u00eb reja t\u00eb firmware p\u00ebr pajisjet e tyre. P\u00ebr t\u00eb p\u00ebrcaktuar faktin e ngarkes\u00ebs s\u00eb sistemit n\u00eb modalitetin UEFI Secure Boot, mund t\u00eb p\u00ebrdorni komand\u00ebn \"mokutil --sb-state\", dhe p\u00ebr t\u00eb shfaqur list\u00ebn e \u00e7el\u00ebsave t\u00eb hapur q\u00eb jan\u00eb n\u00eb firmware, p\u00ebrdorni \"mokutil --db --short\". P\u00ebr t\u00eb par\u00eb \u00e7el\u00ebsat me t\u00eb cil\u00ebt \u00ebsht\u00eb n\u00ebnshkruar mb\u00ebshtjell\u00ebsi shim, mund t\u00eb ekzekutoni komand\u00ebn \"sudo pesign -S -i \/boot\/efi\/EFI\/fedora\/shimx64.efi\", pas instalimit t\u00eb paket\u00ebs pesign. P\u00ebr t\u00eb kontrolluar n\u00ebse ka nj\u00eb azhurnim t\u00eb firmware-it dhe p\u00ebr ta instaluar at\u00eb, mund t\u00eb p\u00ebrdorni komand\u00ebn \"sudo fwupdmgr update\". <\/p>\n
Versioni tjet\u00ebr i shim do t\u00eb certifikohet vet\u00ebm me nj\u00eb certifikat\u00eb t\u00eb re Microsoft dhe azhurnimi i firmware \u00ebsht\u00eb i nevojsh\u00ebm p\u00ebr t\u00eb p\u00ebrgatitur sistemet tuaja p\u00ebr k\u00ebt\u00eb ndryshim. Azhurnimi i shim do t\u00eb l\u00ebshohet n\u00eb rast se do t\u00eb identifikohen dob\u00ebsi ose gabime t\u00eb r\u00ebnda, q\u00eb mund t\u00eb ndodhin si brenda nj\u00eb muajit ashtu edhe brenda nj\u00eb viti. Gjat\u00eb ekzistenc\u00ebs s\u00eb shim n\u00eb projekt, jan\u00eb identifikuar dob\u00ebsi kritike, nd\u00ebrsa raporti i fundit mbi problemet e siguris\u00eb n\u00eb shim \u00ebsht\u00eb l\u00ebshuar vet\u00ebm disa dit\u00eb m\u00eb par\u00eb. <\/p>\n
Raporti p\u00ebrmban dy dob\u00ebsi t\u00eb identifikuara rishtazi, CVE-2026-8863 dhe \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Fedora Linux \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0438 Shim, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 UEFI Secure Boot. \u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0439\u0442\u0438 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0442\u0430\u043a \u043a\u0430\u043a \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043b\u0438\u0448\u044c \u043a \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182058","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Koha e vlefshm\u00ebris\u00eb s\u00eb certifikat\u00ebs, e cila v\u00ebrteton ngarkuesin p\u00ebr UEFI Secure Boot n\u00eb shp\u00ebrndarjet Linux, po skadon | ProHoster","description":"Zhvilluesit e Fedora Linux sqaruan situat\u00ebn lidhur me skadenc\u00ebn n\u00eb fund t\u00eb qershorit t\u00eb certifikat\u00ebs Microsoft, e cila p\u00ebrdoret p\u00ebr t\u00eb v\u00ebrtetuar n\u00ebnshkrimin dixhital t\u00eb shim-it, p\u00ebrdorur p\u00ebr ngarkimin e verifikuar t\u00eb shp\u00ebrndarjeve Linux n\u00eb m\u00ebnyr\u00ebn UEFI Secure Boot. Kalimi n\u00eb certifikat\u00ebn e re duhet t\u00eb kaloj\u00eb pa u v\u00ebn\u00eb re nga p\u00ebrdoruesit, pasi p\u00ebrfundimi i koh\u00ebzgjatjes s\u00eb certifikat\u00ebs do t\u00eb sjell\u00eb vet\u00ebm pamund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb saj.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/istekaet-vremya-zhizni-sertifikata-kotorym-zaveren-zagruzchik-dlya-uefi-secure-boot-v-distributivah-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u0442\u0435\u043a\u0430\u0435\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0437\u0430\u0432\u0435\u0440\u0435\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0434\u043b\u044f UEFI Secure Boot \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Fedora Linux \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0438 Shim, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 UEFI Secure Boot. \u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0439\u0442\u0438 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0442\u0430\u043a \u043a\u0430\u043a \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043b\u0438\u0448\u044c \u043a \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/istekaet-vremya-zhizni-sertifikata-kotorym-zaveren-zagruzchik-dlya-uefi-secure-boot-v-distributivah-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-14T12:48:27+00:00","article:modified_time":"2026-06-14T12:48:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182058","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=182058"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182058\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=182058"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=182058"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=182058"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nCVE-2026-10797, q\u00eb lejojn\u00eb ekzekutimin e kodit t\u00eb p\u00ebrdoruesit n\u00eb nj\u00eb faz\u00eb t\u00eb hershme t\u00eb ngarkimit para se t\u00eb kaloj\u00eb kontrollin mbi sistemin operativ, t\u00eb anashkaloj\u00eb mbrojtjen UEFI Secure Boot dhe t\u00eb realizoj\u00eb ngarkimin e komponent\u00ebve t\u00eb kernelit pa n\u00ebnshkrim digjital. Problemet prekin versionet e shim deri n\u00eb l\u00ebshimin 0.9 p\u00ebrfshir\u00eb, t\u00eb formuara para vitit 2016. Sistemet shum\u00eb t\u00eb vjetra, si
\n RedHat Enterprise Linux 7.2, CentOS 7.2, Oracle Linux 7.2, ROSA Linux R10\/R9 dhe openSUSE me shim 0.9. Shimat deri n\u00eb versionin 0.9 jan\u00eb shtuar n\u00eb baz\u00ebn e n\u00ebnshkrimeve dixhitale t\u00eb t\u00ebrhequra DBX (Baza e T\u00eb N\u00ebnshkruarve t\u00eb Nohashit UEFI) dhe n\u00eb rast t\u00eb p\u00ebrdit\u00ebsimit t\u00eb DBX n\u00eb sistem nuk do t\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr ngarkimin n\u00eb m\u00ebnyr\u00eb UEFI Secure Boot.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"