Zhvilluesit e Fedora Linux sqaruan situat\u00ebn lidhur me skadimin n\u00eb fund t\u00eb qershorit t\u00eb certifikat\u00ebs Microsoft, e cila p\u00ebrdoret p\u00ebr t\u00eb n\u00ebnshkruar digjitalisht slojin Shim, e cila p\u00ebrdoret p\u00ebr ngarkimin e verifikuar t\u00eb distribucioneve Linux n\u00eb modalitetin UEFI Secure Boot. Kalimi n\u00eb nj\u00eb certifikat\u00eb t\u00eb re duhet t\u00eb ndodh\u00eb pa u v\u00ebn\u00eb re nga p\u00ebrdoruesit, pasi p\u00ebrfundimi i periudh\u00ebs s\u00eb jet\u00ebs s\u00eb certifikat\u00ebs do t\u00eb \u00e7oj\u00eb vet\u00ebm n\u00eb pamund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb saj p\u00ebr krijimin e n\u00ebnshkrimeve t\u00eb reja. Gjat\u00eb ngarkimit n\u00eb UEFI Secure Boot, periudha e vlefshm\u00ebris\u00eb s\u00eb certifikat\u00ebs nuk kontrollohet dhe ka r\u00ebnd\u00ebsi vet\u00ebm t\u00ebrheqja e certifikatave t\u00eb komprometuara. <\/p>\n
Sistemet ekzistuese pa instaluar p\u00ebrdit\u00ebsimin shim do t\u00eb vazhdojn\u00eb ngarkimin derisa \u00e7el\u00ebsi publik i certifikat\u00ebs t\u00eb hiqet nga firmware ose t\u00eb vendoset n\u00eb list\u00ebn e t\u00ebrhequra t\u00eb certifikatave UEFI (DBX). \u00c7el\u00ebsi i Microsoft n\u00ebnshkruan vet\u00ebm slojin boot shim, n\u00eb t\u00eb cilin \u00ebsht\u00eb i pranish\u00ebm \u00e7el\u00ebsi publik i distribucionit, q\u00eb p\u00ebrdoret p\u00ebr n\u00ebnshkrimin e komponent\u00ebve t\u00eb ngarkuar, si\u00e7 jan\u00eb bootloader GRUB2, b\u00ebrthama Linux, modulat e b\u00ebrtham\u00ebs dhe proceset e p\u00ebrdorura gjat\u00eb ngarkimit, si fwupd. Ky qasje lejon q\u00eb Microsoft t\u00eb n\u00ebnshkruaj\u00eb vet\u00ebm ndryshimet n\u00eb slojin shim dhe t\u00eb siguroj\u00eb verifikimin e procesit t\u00eb ngarkimit t\u00eb distribucionit vet\u00eb.<\/p>\n
Certifikata Microsoft p\u00ebr n\u00ebnshkrimin e firmware-ve t\u00eb pal\u00ebve t\u00eb treta p\u00ebr UEFI Secure Boot ka qen\u00eb n\u00eb fuqi q\u00eb nga viti 2011. N\u00eb vitin 2023, nj\u00eb certifikat\u00eb e re u gjenerua q\u00eb do t\u00eb p\u00ebrdoret p\u00ebr formimin e n\u00ebnshkrimeve q\u00eb nga tetori 2025. N\u00eb depozitat Fedora Rawhide, mbi t\u00eb cilat formohet l\u00ebshimi Fedora 45, tashm\u00eb \u00ebsht\u00eb shtuar nj\u00eb shim e p\u00ebrdit\u00ebsuar, e n\u00ebnshkruar nga disa \u00e7el\u00ebsa p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebrin\u00eb maksimale me pajisjet (mund t\u00eb p\u00ebrdoret si n\u00eb firmware-t e vjetra pa \u00e7el\u00ebsin publik t\u00eb certifikat\u00ebs s\u00eb re, ashtu edhe n\u00eb firmware-t pa \u00e7el\u00ebsin publik t\u00eb certifikat\u00ebs s\u00eb vjet\u00ebr).<\/p>\n
Megjith\u00ebse skadimi i certifikat\u00ebs Microsoft nuk duhet t\u00eb ndikon n\u00eb funksionalitetin e ngarkimit, zhvilluesit e Fedora rekomandojn\u00eb p\u00ebrdoruesve t\u00eb azhurnojn\u00eb baz\u00ebn e t\u00eb dh\u00ebnave me \u00e7el\u00ebsat p\u00ebr Secure Boot kur t\u00eb dalin versione t\u00eb reja t\u00eb firmware-it p\u00ebr pajisjet e tyre. P\u00ebr t\u00eb p\u00ebrcaktuar n\u00ebse sistemi \u00ebsht\u00eb ngarkuar n\u00eb modalitetin UEFI Secure Boot, mund t\u00eb p\u00ebrdorni urdhrin \"mokutil --sb-state\", dhe p\u00ebr t\u00eb shfaqur list\u00ebn e \u00e7el\u00ebsave t\u00eb hapur q\u00eb jan\u00eb n\u00eb firmware, p\u00ebrdorni \"mokutil --db --short\". P\u00ebr t\u00eb par\u00eb \u00e7el\u00ebsat me t\u00eb cil\u00ebt \u00ebsht\u00eb n\u00ebnshkruar shtresa shim, mund t\u00eb ekzekutoni urdhrin \"sudo pesign -S -i \/boot\/efi\/EFI\/fedora\/shimx64.efi\", duke e instaluar m\u00eb par\u00eb paket\u00ebn pesign. P\u00ebr t\u00eb kontrolluar n\u00ebse ka nj\u00eb azhurnim t\u00eb firmware-it dhe p\u00ebr ta instaluar at\u00eb, mund t\u00eb ekzekutoni urdhrin \"sudo fwupdmgr update\". <\/p>\n
Versioni i ardhsh\u00ebm i shtres\u00ebs shim do t\u00eb jet\u00eb i nxjerr\u00eb vet\u00ebm me nj\u00eb certifikat\u00eb t\u00eb re Microsoft dhe azhurnimi i firmware-it \u00ebsht\u00eb i nevojsh\u00ebm p\u00ebr t\u00eb p\u00ebrgatitur sistemet e tyre p\u00ebr k\u00ebt\u00eb ndryshim. Azhurnimi i shim do t\u00eb l\u00ebshohet n\u00eb rast se do t\u00eb identifikohen dob\u00ebsi dhe gabime kritike, e cila mund t\u00eb ndodh\u00eb si n\u00eb nj\u00eb muaj ashtu edhe n\u00eb nj\u00eb vit. Gjat\u00eb ekzistenc\u00ebs s\u00eb shim n\u00eb projekt jan\u00eb gjetur dob\u00ebsi kritike, nd\u00ebrsa raporti i fundit mbi problemet me sigurin\u00eb n\u00eb shim u l\u00ebshua vet\u00ebm disa dit\u00eb m\u00eb par\u00eb. <\/p>\n
N\u00eb raport jan\u00eb sh\u00ebnuar dy dob\u00ebsi t\u00eb sapoidentifikuara CVE-2026-8863 dhe \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Fedora Linux \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0438 Shim, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 UEFI Secure Boot. \u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u0440\u043e\u0439\u0442\u0438 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0442\u0430\u043a \u043a\u0430\u043a \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043b\u0438\u0448\u044c \u043a \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182058","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Koha e jet\u00ebs s\u00eb certifikat\u00ebs, me t\u00eb cilin \u00ebsht\u00eb n\u00ebnshkruar ngarkuesi p\u00ebr UEFI Secure Boot n\u00eb distribucione Linux, po skadon | ProHoster","description":"Zhvilluesit e Fedora Linux kan\u00eb sqaruar situat\u00ebn lidhur me skadimin n\u00eb fund t\u00eb qershorit t\u00eb certifikat\u00ebs Microsoft, e cila p\u00ebrdoret p\u00ebr n\u00ebnshkrimin digjital t\u00eb shtres\u00ebs Shim, e cila p\u00ebrdoret p\u00ebr verifikimin.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/istekaet-vremya-zhizni-sertifikata-kotorym-zaveren-zagruzchik-dlya-uefi-secure-boot-v-distributivah-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u0442\u0435\u043a\u0430\u0435\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0437\u0430\u0432\u0435\u0440\u0435\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0434\u043b\u044f UEFI Secure Boot \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Fedora Linux \u043f\u0440\u043e\u044f\u0441\u043d\u0438\u043b\u0438 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 Microsoft, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e \u043f\u0440\u043e\u0441\u043b\u043e\u0439\u043a\u0438 Shim, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/istekaet-vremya-zhizni-sertifikata-kotorym-zaveren-zagruzchik-dlya-uefi-secure-boot-v-distributivah-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-14T12:48:27+00:00","article:modified_time":"2026-06-14T12:48:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182058","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:23","updated":"2026-08-05 12:22:23","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182058","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=182058"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/182058\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=182058"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=182058"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=182058"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nCVE-2026-10797, q\u00eb lejojn\u00eb ekzekutimin e kodit t\u00eb p\u00ebrdoruesit n\u00eb nj\u00eb faz\u00eb t\u00eb hershme t\u00eb ngarkes\u00ebs para se t'i jepet kontrolli sistemit operativ, p\u00ebr t\u00eb anashkaluar mbrojtjen e UEFI Secure Boot dhe p\u00ebr t\u00eb realizuar ngarkimin e komponenteve t\u00eb b\u00ebrtham\u00ebs q\u00eb nuk jan\u00eb n\u00ebnshkruar me nj\u00eb n\u00ebnshkrim digjital. Problemet prekin versionet e shim deri n\u00eb publikimin 0.9 p\u00ebrfshir\u00eb, t\u00eb formuara para vitit 2016. Sistemet shum\u00eb t\u00eb vjetra jan\u00eb t\u00eb prekura, t\u00eb tilla si
\n RedHat Enterprise Linux 7.2, CentOS 7.2, Oracle Linux 7.2, ROSA Linux R10\/R9 dhe openSUSE me shim 0.9. Shtresat shim deri n\u00eb versionin 0.9 p\u00ebrfshir\u00eb jan\u00eb shtuar n\u00eb baz\u00ebn e n\u00ebnshkrimeve digjitale t\u00eb t\u00ebrhequra DBX (UEFI Forbidden Signature Database) dhe n\u00eb rast t\u00eb azhurnimit t\u00eb DBX n\u00eb sistem nuk mund t\u00eb p\u00ebrdoren p\u00ebr ngarkim n\u00eb modalitetin UEFI Secure Boot.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"