{"id":112179,"date":"2023-12-13T09:10:17","date_gmt":"2023-12-13T07:10:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux"},"modified":"2023-12-13T09:10:17","modified_gmt":"2023-12-13T07:10:17","slug":"obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-10-s-ustraneniem-uyazvimostej-udalenie-podderzhki-ums-iz-yadra-linux","title":{"rendered":"P\u00ebrdit\u00ebsimi X.Org Server 21.1.10 me riparimin e dob\u00ebsive. Shk\u00ebputja e mb\u00ebshtetjes UMS nga b\u00ebrthama Linux","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb publikuar p\u00ebrmir\u00ebsimet p\u00ebr X.Org Server 21.1.10 dhe komponentin DDX (Device-Dependent X) xwayland 23.2.3, t\u00eb cilat mund\u00ebsojn\u00eb funksionimin e X.Org Server p\u00ebr ekzekutimin e aplikacioneve X11 n\u00eb ambientet e bazuara n\u00eb Wayland. N\u00eb versionet e reja jan\u00eb eliminuar dy vulnerabilitete. Vulnerabiliteti i par\u00eb mund t\u00eb shfryt\u00ebzohet p\u00ebr t\u00eb rritur privilegjet n\u00eb sistemet ku X-serveri ekzekutohet me drejtat e root-it, si dhe p\u00ebr ekzekutimin e kodit nga distanca n\u00eb konfigurimet ku aksesimi b\u00ebhet p\u00ebrmes ridrejtimit t\u00eb seanc\u00ebs X11 p\u00ebrmes SSH. <\/p>\n
Problemet e identifikuara: <\/p>\n
\n
CVE-2023-6377 — te mbushja e memorjes n\u00eb trajtuesin e butonave XKB, q\u00eb ndodh kur kalon n\u00eb nj\u00eb pajisje logjike t\u00eb hyrjes (p.sh., kur kalon nga nj\u00eb touchpad n\u00eb nj\u00eb maus) p\u00ebr shkak t\u00eb llogaritjes s\u00eb gabuar t\u00eb informacionit p\u00ebr pajisjen. Serveri X ndante memorie mjaftuesh\u00ebm vet\u00ebm p\u00ebr trajtuesin e nj\u00eb butoni XKB, pa marr\u00eb parasysh numrin real t\u00eb butonave n\u00eb pajisjen e re. Si pasoj, k\u00ebrkesa p\u00ebr ndryshimin e trajtuesve t\u00eb butonave XKB \u00e7onte n\u00eb shkruarjen e t\u00eb dh\u00ebnave jasht\u00eb kufijve t\u00eb memories. Problemi shfaqet q\u00eb nga versioni xorg-server-1.6.0 (viti 2009).\n
CVE-2023-6478 — mbushja e numrave t\u00eb plot\u00eb, q\u00eb ndodh kur d\u00ebrgohen k\u00ebrkesa t\u00eb posa\u00e7me RRChangeProviderProperty dhe RRChangeOutputProperty. Ky dob\u00ebsi mund t\u00eb \u00e7oj\u00eb n\u00eb leximin e t\u00eb dh\u00ebnave jasht\u00eb kufijve t\u00eb memories dhe shp\u00ebrndarjen e informacionit nga memoria e procesit. Problemi shkaktohet nga p\u00ebrdorimi i tipit 32-bit int n\u00eb nj\u00eb variab\u00ebl p\u00ebr llogaritjen e madh\u00ebsis\u00eb, e cila mund t\u00eb mbushet kur d\u00ebrgohet nj\u00eb k\u00ebrkes\u00eb e madhe. Problematikat shfaqen q\u00eb nga versionet xorg-server-1.4.0 (viti 2004) dhe xorg-server-1.13.0 (viti 2012). <\/ul>\n
Gjithashtu, mund t\u00eb p\u00ebrmendim k\u00ebrkes\u00ebn p\u00ebr heqjen e thirrjeve ioctl me mb\u00ebshtetje p\u00ebr UMS (P\u00ebrdoruesh\u00ebm Mode-Setting) nga dega linux-next, ku zhvillohen ndryshimet p\u00ebr b\u00ebrtham\u00ebn Linux 6.8. Interface UMS \u00ebsht\u00eb e destinuar p\u00ebr kalimin e modaliteteve video n\u00eb nivel p\u00ebrdoruesi dhe \u00ebsht\u00eb p\u00ebrdorur n\u00eb drejtuesit shum\u00eb t\u00eb vjet\u00ebr, mb\u00ebshtetje e t\u00eb cil\u00ebve \u00ebsht\u00eb ndaluar. Drejtuesit q\u00eb ofronin interface UMS ishin shpallur t\u00eb d\u00ebshtuara n\u00eb vitin 2016 dhe jan\u00eb hequr n\u00eb l\u00ebshimin e b\u00ebrtham\u00ebs 6.3. <\/p>\n
Ve\u00e7an\u00ebrisht, n\u00eb b\u00ebrtham\u00ebn 6.3 jan\u00eb hequr drejtuesit i810 (kartelat e vjetra t\u00eb integruara Intel 8xx), mga (GPU Matrox), r128 (ATI Rage 128 GPU, duke p\u00ebrfshir\u00eb kartat Rage Fury, XPERT 99 dhe XPERT 128), savage (GPU S3 Savage), sis (GPU Crusty SiS), tdfx (3dfx Voodoo) dhe via (VIA IGP). N\u00ebse nuk \u00ebsht\u00eb marr\u00eb asnj\u00eb k\u00ebrkes\u00eb p\u00ebr t\u2019i rikthyer k\u00ebta drejtues q\u00eb nga heqja e tyre, n\u00eb b\u00ebrtham\u00ebn 6.8 \u00ebsht\u00eb vendosur t\u00eb hiqen elementet e infrastruktur\u00ebs UMS t\u00eb p\u00ebrdorura n\u00eb k\u00ebta drejtues. Drejtuesit aktual\u00eb jan\u00eb transferuar prej koh\u00ebsh n\u00eb kalimin e modaliteteve video p\u00ebrmes interface KMS (Kernel Mode Setting). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"