{"id":112179,"date":"2023-12-13T09:10:17","date_gmt":"2023-12-13T07:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux"},"modified":"2023-12-13T09:10:17","modified_gmt":"2023-12-13T07:10:17","slug":"obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","title":{"rendered":"Mise \u00e0 jour du X.Org Server 21.1.10 corrigeant des vuln\u00e9rabilit\u00e9s. Suppression du support UMS dans le noyau Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Des mises \u00e0 jour correctives pour X.Org Server 21.1.10 et le composant DDX (Device-Dependent X) xwayland 23.2.3 ont \u00e9t\u00e9 publi\u00e9es, permettant le lancement de X.Org Server pour ex\u00e9cuter des applications X11 dans des environnements bas\u00e9s sur Wayland. Les nouvelles versions corrigent deux vuln\u00e9rabilit\u00e9s. La premi\u00e8re peut \u00eatre exploit\u00e9e pour \u00e9lever les privil\u00e8ges sur des syst\u00e8mes o\u00f9 le serveur X s'ex\u00e9cute avec des droits root, ainsi que pour l'ex\u00e9cution distante de code dans des configurations o\u00f9 l'acc\u00e8s utilise le redirection de session X11 via SSH.       <\/p>\n<p>Probl\u00e8mes identifi\u00e9s :  <\/p>\n<ul>\n<li class=\"l\"> CVE-2023-6377 \u2014 d\u00e9bordement de m\u00e9moire tampon dans le gestionnaire de boutons XKB, survenant lors du changement de p\u00e9riph\u00e9rique d'entr\u00e9e (par exemple, en passant du pav\u00e9 tactile \u00e0 la souris) en raison d'un calcul incorrect des informations sur le p\u00e9riph\u00e9rique. Le serveur X allouait une m\u00e9moire suffisante uniquement pour le gestionnaire d'un bouton XKB, sans tenir compte du nombre r\u00e9el de boutons sur le nouvel appareil. En cons\u00e9quence, une demande de modification des gestionnaires de boutons XKB entra\u00eenait l'\u00e9criture de donn\u00e9es dans une zone en dehors du tampon. Le probl\u00e8me se manifeste depuis la version xorg-server-1.6.0 (2009).\n<li class=\"l\"> CVE-2023-6478 \u2014 d\u00e9bordement d'entier, se produisant lors de l'envoi de requ\u00eates sp\u00e9cialement format\u00e9es RRChangeProviderProperty et RRChangeOutputProperty. La vuln\u00e9rabilit\u00e9 peut entra\u00eener la lecture de donn\u00e9es en dehors du tampon et une fuite d'informations de la m\u00e9moire du processus. Le probl\u00e8me est caus\u00e9 par l'utilisation du type int 32 bits dans une variable pour calculer la taille, qui peut \u00eatre d\u00e9bord\u00e9e lors de la transmission d'une requ\u00eate de grande taille. Les probl\u00e8mes se manifestent depuis les versions xorg-server-1.4.0 (2004) et xorg-server-1.13.0 (2012).      <\/ul>\n<p>Il convient \u00e9galement de noter la demande de suppression des appels ioctl avec support UMS (Userspace Mode-Setting) de la branche linux-next, o\u00f9 des modifications pour le noyau Linux 6.8 sont en cours de d\u00e9veloppement. L'interface UMS est destin\u00e9e \u00e0 basculer les modes vid\u00e9o au niveau de l'utilisateur et \u00e9tait utilis\u00e9e dans de tr\u00e8s anciens pilotes, dont le support a \u00e9t\u00e9 abandonn\u00e9. Les pilotes fournissant l'interface UMS ont \u00e9t\u00e9 d\u00e9clar\u00e9s obsol\u00e8tes en 2016 et supprim\u00e9s dans la version 6.3 du noyau.      <\/p>\n<p>En particulier, dans le noyau 6.3, les pilotes i810 (anciens graphiques int\u00e9gr\u00e9s Intel 8xx), mga (GPU Matrox), r128 (GPU ATI Rage 128, y compris les cartes Rage Fury, XPERT 99 et XPERT 128), savage (GPU S3 Savage), sis (Crusty SiS GPU), tdfx (3dfx Voodoo) et via (VIA IGP) ont \u00e9t\u00e9 supprim\u00e9s. Comme aucune demande de retour de ces pilotes n'a \u00e9t\u00e9 re\u00e7ue depuis leur suppression, il a \u00e9t\u00e9 d\u00e9cid\u00e9 de supprimer dans le noyau 6.8 les \u00e9l\u00e9ments de l'infrastructure UMS utilis\u00e9s dans ces pilotes \u00e0 partir du sous-syst\u00e8me DRM. Les pilotes toujours pertinents ont depuis longtemps \u00e9t\u00e9 transf\u00e9r\u00e9s au mode de commutation vid\u00e9o via l'interface KMS (Kernel Mode Setting).<br \/>\n<br \/>Source : <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60280\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.10 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 Wayland. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 X-\u0441\u0435\u0440\u0432\u0435\u0440 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112179","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.10 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 X.Org Server 21.1.10 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 UMS \u0438\u0437 \u044f\u0434\u0440\u0430 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.10 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-12-13T07:10:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-12-13T07:10:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Mises \u00e0 jour du X.Org Server 21.1.10 corrigeant les vuln\u00e9rabilit\u00e9s. Suppression du support UMS du noyau Linux | ProHoster","description":"Des versions correctives de X.Org Server 21.1.10 et du composant DDX (Device-Dependent X) xwayland 23.2.3 ont \u00e9t\u00e9 publi\u00e9es, permettant de lancer X.Org Server pour ex\u00e9cuter des applications X11 dans des environnements bas\u00e9s sur.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 X.Org Server 21.1.10 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 UMS \u0438\u0437 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.10 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-13T07:10:17+00:00","article:modified_time":"2023-12-13T07:10:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/112179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=112179"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/112179\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=112179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=112179"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=112179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}