{"id":183890,"date":"2026-10-15T04:53:55","date_gmt":"2026-10-15T02:53:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/obnovlenie-nginx-1-31-7-i-njs-1-0-2-s-ustraneniem-uyazvimostej"},"modified":"2026-10-15T04:53:59","modified_gmt":"2026-10-15T02:53:59","slug":"nginx-1-31-7-and-njs-1-0-2-update-with-security-fixes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/nginx-1-31-7-and-njs-1-0-2-update-with-security-fixes","title":{"rendered":"Update nginx 1.31.7 and njs 1.0.2 to fix vulnerabilities","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb formuar nj\u00eb version i deg\u00ebs kryesore nginx 1.31.7, ku vazhdon zhvillimi i mund\u00ebsive t\u00eb reja, si dhe publikimi i nj\u00eb dege stabile, e mb\u00ebshtetur paralelisht, nginx 1.30.6, n\u00eb t\u00eb cil\u00ebn b\u00ebhen vet\u00ebm ndryshime q\u00eb lidhen me zgjidhjen e gabimeve serioze dhe dob\u00ebsive. N\u00eb p\u00ebrdit\u00ebsime jan\u00eb eliminuar 5 dob\u00ebsi:<\/p>\n
\n
CVE-2026-15176 \u2014 mbushja e bufferit, e cila shfaqet gjat\u00eb p\u00ebrdorimit \n e drejta «alias» n\u00eb konfigurimet q\u00eb ndryshojn\u00eb URI-n\u00eb e k\u00ebrkes\u00ebs n\u00ebp\u00ebrmjet e drejt\u00ebs \n «rewrite» me nj\u00eb ridrejtim t\u00eb m\u00ebtejsh\u00ebm n\u00eb skedarin.<\/p>\n
CVE-2026-93479 \u2014 mbushja e bufferit q\u00eb ndodh gjat\u00eb ekzekutimit t\u00eb shprehjeve, e cila shfaqet gjat\u00eb llogaritjes s\u00eb rrug\u00ebs drejt direktoris\u00eb rr\u00ebnj\u00eb dhe gjat\u00eb regjistrimit t\u00eb k\u00ebrkesave n\u00eb modulet http dhe stream.\n
CVE-2026-95101 \u2014 kalimi i kufizimeve «client_max_body_size» dhe vendosja e t\u00eb dh\u00ebnave t\u00eb pal\u00ebve t\u00eb treta n\u00eb k\u00ebrkes\u00ebn e p\u00ebrfaq\u00ebsuar p\u00ebrmes d\u00ebrgimit t\u00eb kuadrove t\u00eb pap\u00ebrshtatshme n\u00eb HTTP\/3, nj\u00eb pjes\u00eb e p\u00ebrmbajtjes s\u00eb s\u00eb cil\u00ebs mund t\u00eb jet\u00eb trajtuar si trup i k\u00ebrkes\u00ebs.\n
CVE-2026-97629 \u2014 falsifikimi i sesioneve TLS p\u00ebr shkak t\u00eb l\u00ebnies s\u00eb nj\u00eb nga \u00e7el\u00ebsat e sesionit t\u00eb pa inicializuar gjat\u00eb rotacionit.\n
CVE-2026-97205 \u2014 qasja n\u00eb memorie pas lirimit t\u00eb saj (use-after-free), q\u00eb ndodh gjat\u00eb p\u00ebrdorimit n\u00eb faqet SSI t\u00eb komandeve «include virtual» n\u00eb kombinim me p\u00ebrdorimin e input\/output asinkron (AIO).\n<\/ul>\n
Ndryshimet q\u00eb nuk jan\u00eb t\u00eb lidhura me dob\u00ebsit\u00eb n\u00eb nginx 1.31.7: <\/p>\n
\n
Modulet ngx_http_geoip_module dhe ngx_stream_geoip_module tani mb\u00ebshtesin DB-n\u00eb n\u00eb formatin MaxMind (MMDB).\n