Rashin lahani a cikin X.Org Server da libX11

A cikin X.Org Server da libX11 sun bayyana biyu rauni:

  • CVE-2020-14347 - Rashin ƙaddamar da ƙwaƙwalwar ajiya lokacin rarraba buffers don pixmaps ta amfani da kiran AllocatePixmap() na iya sa abokin ciniki X ya zubar da ƙwaƙwalwar ajiya daga tarin lokacin da uwar garken X ke gudana tare da manyan gata. Ana iya amfani da wannan yoyon don ketare fasahar Rarrabuwar Address (ASLR). A hade tare da sauran raunin da ya faru, ana iya amfani da matsalar don ƙirƙirar amfani don ƙara dama a cikin tsarin. Har yanzu ana samun gyara azaman faci.
    Turanci ana sa ran sakin gyara na X.Org Server 1.20.9 a cikin kwanaki masu zuwa.
  • CVE-2020-14344 madaidaicin lamba ne a cikin aiwatar da XIM (Hanyar Shigarwa) a cikin libX11, wanda zai iya haifar da ɓarna a ƙwaƙwalwar ajiya a lokacin da ake sarrafa saƙon da aka kera na musamman daga hanyar shigarwa.
    Matsalolin da aka gyara a cikin fitarwa libX11 1.6.10.

source: budenet.ru