{"id":182227,"date":"2026-06-18T08:48:05","date_gmt":"2026-06-18T06:48:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-nginx-1-31-2-s-ustraneniem-uyazvimostej-ekspluatiruemyh-cherez-http-3-http2-i-grpc"},"modified":"2026-06-18T08:48:05","modified_gmt":"2026-06-18T06:48:05","slug":"obnovlenie-nginx-1-31-2-s-ustraneniem-uyazvimostej-ekspluatiruemyh-cherez-http-3-http2-i-grpc","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-nginx-1-31-2-s-ustraneniem-uyazvimostej-ekspluatiruemyh-cherez-http-3-http2-i-grpc","title":{"rendered":"P\u00ebrdit\u00ebsimi i nginx 1.31.2 me zgjidhjen e dob\u00ebsive, t\u00eb shfryt\u00ebzuara p\u00ebrmes HTTP\/3, HTTP2 dhe gRPC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb formuar l\u00ebshimi i deg\u00ebs kryesore t\u00eb nginx 1.31.2, ku vazhdon zhvillimi i ve\u00e7orive t\u00eb reja, si dhe publikimi i deg\u00ebs stabile t\u00eb mb\u00ebshtetur paralelisht, nginx 1.30.3, n\u00eb t\u00eb cil\u00ebn b\u00ebhen vet\u00ebm ndryshime q\u00eb lidhen me zgjidhjen e gabimeve serioze dhe dob\u00ebsive. N\u00eb p\u00ebrdit\u00ebsime jan\u00eb zgjidhur 3 dob\u00ebsi:<\/p>\n
\n
CVE-2026-42530 \u2014 akses n\u00eb kujtes\u00eb t\u00eb \u00e7liruar (use-after-free) n\u00eb implementimin e protokollit HTTP\/3. Problemi ka nj\u00eb nivel kritikal rreziku (9.2 nga 10), q\u00eb nuk p\u00ebrjashton ekzekutimin e kodit nga nj\u00eb proces n\u00eb p\u00ebrpunimin e nj\u00eb seance t\u00eb ve\u00e7uar sipas protokollit QUIC.\n
CVE-2026-42055 \u2014 mbipopullimi i tamponit n\u00eb modulet ngx_http_proxy_v2_module dhe ngx_http_grpc_module, e cila shfaqet gjat\u00eb prokuruar k\u00ebrkesave t\u00eb ve\u00e7anta sipas protokollit HTTP\/2 ose n\u00eb backend gRPC. Problemi ka nj\u00eb nivel kritikal rreziku (9.2 nga 10), q\u00eb lejon ekzekutimin e kodit nga distanca. Vulnerabiliteti shfaqet n\u00eb konfigurimet me cil\u00ebsimin \n\u00abignore_invalid_headers off;\u00bb dhe vlera te m\u00ebdha \u00ablarge_client_header_buffers.\u00bb<\/p>\n
CVE-2026-48142 \u2014 leximi nga zona jasht\u00eb tamponit t\u00eb ndar\u00eb gjat\u00eb p\u00ebrpunimit t\u00eb k\u00ebrkesave t\u00eb ve\u00e7anta, duke \u00e7uar n\u00eb ri-kodimin e tekstit n\u00eb kodimin UTF-8 p\u00ebrmes modulit ngx_http_charset_module. Vulnerabiliteti shfaqet n\u00eb konfigurimet me direktiv\u00ebn \u00abcharset_map\u00bb n\u00eb prani t\u00eb direktivave \u00absource_charset utf-8\u00bb dhe \u00abcharset tjet\u00ebr_kodim\u00bb n\u00eb bllokun location. Problemi ka nj\u00eb nivel t\u00eb mes\u00ebm rreziku (6.3 nga 10), q\u00eb lejon rrjedhjen e p\u00ebrmbajtjes s\u00eb kujtes\u00ebs s\u00eb procesit.\n<\/ul>\n
P\u00ebrve\u00e7 korrigjimit t\u00eb dob\u00ebsive n\u00eb versionin nginx 1.31.2 \u00ebsht\u00eb shtuar variabla $ssl_sigalgs, q\u00eb p\u00ebrmban algoritmet e n\u00ebnshkrimeve dixhitale t\u00eb shpallura nga klienti n\u00eb mesazhin ClientHello gjat\u00eb negociat\u00ebs s\u00eb TLS. P\u00ebr formimin e identifikuesit q\u00eb kalon p\u00ebrmes variabl\u00ebs $request_id, \u00ebsht\u00eb p\u00ebrdorur algoritmi i hashimit SipHash-2-4. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"