DiagSpill (CVE-2026-74469, eksploit) \u2014 tejkalimi i tamponit n\u00eb mjetet diagnostikuese t\u00eb protokollit SCTP. P\u00ebrve\u00e7 realizimit lokal t\u00eb sulmit, vulnerabiliteti n\u00eb kushte specifike mund t\u00eb shfryt\u00ebzohet gjithashtu n\u00eb distanc\u00eb. <\/ul>\n
Vulnerabiliteti (CVE-2026-89775) n\u00eb hipervizorin KVM, q\u00eb lejon qasje n\u00eb ambientin e hostit nga sistemi mik. N\u00ebse p\u00ebrdoruesit pa privilegje kan\u00eb qasje n\u00eb pajisjen \/dev\/kvm (n\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar n\u00eb RHEL), vulnerabiliteti gjithashtu mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb rritur privilegjet e tyre n\u00eb sistem. Problemi shfaqet vet\u00ebm n\u00eb sistemet me arkitektur\u00eb ARM64 kur mb\u00ebshtetja p\u00ebr virtualizimin e thell\u00eb \u00ebsht\u00eb e aktivizuar. Vulnerabiliteti shkaktohet nga fakti se procedura e llogaritjes s\u00eb madh\u00ebsis\u00eb ktheu \"0\", duke n\u00ebnkuptuar se madh\u00ebsia \u00ebsht\u00eb e panjohur, nd\u00ebrsa funksioni i lirimit t\u00eb faqeve t\u00eb memories trajton \"0\" si nj\u00eb vler\u00eb reale dhe nuk e pastron faqet e memories.\n
N\u00eb edicionin e serverit t\u00eb post\u00ebs Exim 4.100.1 jan\u00eb eliminuar 4 dob\u00ebsi: leximi i t\u00eb dh\u00ebnave jasht\u00eb kufijve t\u00eb tamponit dhe p\u00ebrdorimi i t\u00eb dh\u00ebnave t\u00eb pa inicializuara n\u00eb implementimin e protokollit Proxy; qasja n\u00eb memorie pas lirimit t\u00eb saj n\u00eb TLS-on-connect kur p\u00ebrdoret GnuTLS; injektimi i mesazhit n\u00eb nj\u00eb rrjedh\u00eb tjet\u00ebr (SMTP smuggling).\n
N\u00eb paket\u00ebn Ghostscript 10.08.0 \u00ebsht\u00eb eliminuar nj\u00eb dob\u00ebsi (CVE-2026-39919), e shkaktuar nga mbushja e tamponit n\u00eb kodin p\u00ebr analizimin e formatit JPEG 2000 kur jan\u00eb specifikuar vlera t\u00eb pap\u00ebrshtatshme p\u00ebr sub-sampling. Problemi mund t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e kodit kur p\u00ebrpunohen n\u00eb Ghostscript skedar\u00eb PDF t\u00eb hartuar posa\u00e7\u00ebrisht me imazhe t\u00eb integruara n\u00eb formatin JPEG 2000. Rreziku i dob\u00ebsis\u00eb p\u00ebrkeq\u00ebsohet nga fakti se Ghostscript thirret n\u00eb procesin e krijimit t\u00eb miniaturave n\u00eb desktop, gjat\u00eb indeksimit t\u00eb sfondit t\u00eb t\u00eb dh\u00ebnave dhe gjat\u00eb konvertimit t\u00eb imazheve. P\u00ebr nj\u00eb sulm t\u00eb suksessh\u00ebm, shpesh mjafton vet\u00ebm t\u00eb shkarkohet nj\u00eb skedar me eksploatimin ose t\u00eb shikohet nj\u00eb katalog me t\u00eb n\u00eb Nautilus. Dob\u00ebsit\u00eb n\u00eb Ghostscript gjithashtu mund t\u00eb shfryt\u00ebzohen p\u00ebrmes menaxher\u00ebve t\u00eb imazheve t\u00eb bazuar n\u00eb paketat ImageMagick dhe GraphicsMagick, duke i kaluar atyre nj\u00eb skedar JPEG ose PNG, ku n\u00eb vend t\u00eb imazhit ndodhet kodi PostScript (ky skedar do t\u00eb p\u00ebrjetohet n\u00eb Ghostscript, pasi tipi MIME njihet nga p\u00ebrmbajtja dhe jo sipas zgjedhjes). Problemi \u00ebsht\u00eb zgjidhur n\u00eb Ghostscript 10.08.0.\n
N\u00eb serverin DNS Unbound 1.26.1 jan\u00eb eliminuar 9 dob\u00ebsi, p\u00ebrfshir\u00eb problemin CVE-2026-81642, q\u00eb \u00e7on n\u00eb mbushjen e tamponit gjat\u00eb p\u00ebrpunimit t\u00eb DNSKEY t\u00eb caktuara. Dob\u00ebsia mund t\u00eb p\u00ebrdoret p\u00ebr ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb server. Gjithashtu jan\u00eb eliminuar: mbushja e tamponit n\u00eb kodin e pun\u00ebs me DNSSEC, d\u00ebmtimi i t\u00eb dh\u00ebnave n\u00eb memorie n\u00eb menaxherin CNAME, qasja n\u00eb memorie t\u00eb liruar tashm\u00eb n\u00eb kodin DoQ dhe DoH.\n
N\u00eb sistemin e zbulimit dhe parandalimit t\u00eb sulmeve Suricata 8.0.7 jan\u00eb eliminuar 67 dob\u00ebsi, nga t\u00eb cilat dy jan\u00eb etiketuar si kritike. Informacioni mbi problemet ende nuk zbulohet, por duke u bazuar n\u00eb nivelin e rrezikut, dob\u00ebsit\u00eb lejojn\u00eb ekzekutimin e kodit n\u00eb distanc\u00eb gjat\u00eb p\u00ebrpunimit t\u00eb trafikut t\u00eb hartuar posa\u00e7\u00ebrisht. <\/ul>\n