{"id":112179,"date":"2023-12-13T09:10:17","date_gmt":"2023-12-13T07:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux"},"modified":"2023-12-13T09:10:17","modified_gmt":"2023-12-13T07:10:17","slug":"obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","title":{"rendered":"X.Org Server 21.1.10 friss\u00edt\u00e9s a sebezhet\u0151s\u00e9gek jav\u00edt\u00e1s\u00e1val. Az UMS t\u00e1mogat\u00e1s\u00e1nak elt\u00e1vol\u00edt\u00e1sa a Linux kernelb\u0151l.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Megjelentek a X.Org Server 21.1.10 \u00e9s a DDX-komponens (Eszk\u00f6zf\u00fcgg\u0151 X) xwayland 23.2.3 jav\u00edt\u00f3 kiad\u00e1sai, amelyek lehet\u0151v\u00e9 teszik az X.Org Server futtat\u00e1s\u00e1t X11-alkalmaz\u00e1sok v\u00e9grehajt\u00e1s\u00e1ra Wayland alap\u00fa k\u00f6rnyezetekben. Az \u00faj verzi\u00f3kban k\u00e9t sebezhet\u0151s\u00e9get jav\u00edtottak. Az els\u0151 sebezhet\u0151s\u00e9g kihaszn\u00e1lhat\u00f3 a privil\u00e9giumok emel\u00e9s\u00e9re olyan rendszerekben, ahol az X-szerver root jogokkal fut, valamint t\u00e1voli k\u00f3d v\u00e9grehajt\u00e1s\u00e1ra olyan konfigur\u00e1ci\u00f3kban, ahol az SSH seg\u00edts\u00e9g\u00e9vel X11 munkamenet \u00e1tir\u00e1ny\u00edt\u00e1st haszn\u00e1lnak.       <\/p>\n<p>Az azonos\u00edtott probl\u00e9m\u00e1k:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2023-6377 \u2014 a buffer overflow in the XKB button handler that occurs when switching logical input devices (for example, when switching from a touchpad to a mouse) due to an incorrect calculation of device information. The X server allocated memory sufficient only for handling a single XKB button, without taking into account the actual number of buttons on the new device. As a result, a request to change XKB button handlers led to data being written beyond the buffer. The problem manifests starting from the release of xorg-server-1.6.0 (2009).\n<li class=\"l\"> CVE-2023-6478 \u2014 an integer overflow that occurs when sending specially crafted RRChangeProviderProperty and RRChangeOutputProperty requests. This vulnerability can lead to reading data from outside the buffer and leaking information from the process memory. The issue is caused by using a 32-bit int type in a variable for size calculation, which can overflow when a large request is transmitted. The problems manifest starting from releases xorg-server-1.4.0 (2004) and xorg-server-1.13.0 (2012).      <\/ul>\n<p>Tov\u00e1bb\u00e1 fontos megjegyezni, hogy a ioctl h\u00edv\u00e1sok elt\u00e1vol\u00edt\u00e1s\u00e1ra vonatkoz\u00f3 k\u00e9r\u00e9s az UMS (Felhaszn\u00e1l\u00f3i M\u00f3d Be\u00e1ll\u00edt\u00e1sa) t\u00e1mogat\u00e1s\u00e1val a linux-next \u00e1gon, ahol a Linux 6.8 kernelhez tartoz\u00f3 v\u00e1ltoz\u00e1sok fejl\u0151dnek. Az UMS interf\u00e9sz a vide\u00f3m\u00f3dok felhaszn\u00e1l\u00f3i szint\u0171 v\u00e1lt\u00e1s\u00e1ra szolg\u00e1l, \u00e9s nagyon r\u00e9gi meghajt\u00f3kban haszn\u00e1lt\u00e1k, amelyek t\u00e1mogat\u00e1sa megsz\u0171nt. Az UMS interf\u00e9sz\u0171 meghajt\u00f3k 2016-ban elavultnak lettek nyilv\u00e1n\u00edtva, \u00e9s a 6.3 kernel kiad\u00e1s\u00e1val elt\u00e1vol\u00edt\u00e1sra ker\u00fcltek.      <\/p>\n<p>K\u00fcl\u00f6n\u00f6sen a 6.3-as kern\u00e9l elt\u00e1vol\u00edtott\u00e1k az i810 (r\u00e9gi Intel 8xx integr\u00e1lt grafikus k\u00e1rty\u00e1k), mga (Matrox GPU), r128 (ATI Rage 128 GPU, bele\u00e9rtve a Rage Fury, XPERT 99 \u00e9s XPERT 128 k\u00e1rty\u00e1kat), savage (S3 Savage GPU), sis (Crusty SiS GPU), tdfx (3dfx Voodoo) \u00e9s via (VIA IGP) meghajt\u00f3kat. Mivel az elt\u00e1vol\u00edt\u00e1suk \u00f3ta nem \u00e9rkezett k\u00e9r\u00e9s a vissza\u00e1ll\u00edt\u00e1sukra, a 6.8-as kern\u00e9l \u00fagy d\u00f6nt\u00f6ttek, hogy elt\u00e1vol\u00edtj\u00e1k a DRM alrendszerb\u0151l a megl\u00e9v\u0151 UMS-infrastrukt\u00fara elemeket, amelyeket ezek a meghajt\u00f3k haszn\u00e1ltak. A relev\u00e1ns meghajt\u00f3k m\u00e1r r\u00e9g\u00f3ta \u00e1t\u00e1lltak a vide\u00f3 m\u00f3dok v\u00e1lt\u00e1s\u00e1ra a KMS (Kernel Mode Setting) interf\u00e9szen kereszt\u00fcl.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60280\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.10 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 Wayland. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 X-\u0441\u0435\u0440\u0432\u0435\u0440 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112179","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.10 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 X.Org Server 21.1.10 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 UMS \u0438\u0437 \u044f\u0434\u0440\u0430 Linux | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.10 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-12-13T07:10:17+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-12-13T07:10:17+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 X.Org Server 21.1.10 friss\u00edt\u00e9se biztons\u00e1gi r\u00e9sek jav\u00edt\u00e1s\u00e1val. A UMS t\u00e1mogat\u00e1s\u00e1nak elt\u00e1vol\u00edt\u00e1sa a Linux kern\u00e9b\u0151l | ProHoster","description":"Megjelentek a X.Org Server 21.1.10 \u00e9s a DDX komponens (Device-Dependent X) xwayland 23.2.3 hibajav\u00edt\u00f3 kiad\u00e1sai, amelyek lehet\u0151v\u00e9 teszik a X.Org Server ind\u00edt\u00e1s\u00e1t X11-alkalmaz\u00e1sok futtat\u00e1s\u00e1ra alap\u00fa k\u00f6rnyezetekben.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 X.Org Server 21.1.10 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0423\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 UMS \u0438\u0437 \u044f\u0434\u0440\u0430 Linux | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.10 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.3, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-13T07:10:17+00:00","article:modified_time":"2023-12-13T07:10:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=112179"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112179\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=112179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=112179"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=112179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}