{"id":112973,"date":"2024-01-18T11:28:03","date_gmt":"2024-01-18T09:28:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej"},"modified":"2024-01-18T11:28:03","modified_gmt":"2024-01-18T09:28:03","slug":"obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsim i X.Org Server 21.1.11 me rregullimin e 6 cenueshm\u00ebrive","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Jan\u00eb publikuar versionet korrigjuese t\u00eb X.Org Server 21.1.11 dhe t\u00eb komponentit DDX (Device-Dependent X) xwayland 23.2.4, i cili mund\u00ebson nisjen e X.Org Server p\u00ebr ekzekutimin e aplikacioneve X11 n\u00eb mjedise t\u00eb bazuara n\u00eb Wayland. N\u00eb versionet e reja jan\u00eb eliminuar 6 cenueshm\u00ebri, disa prej t\u00eb cilave mund t\u00eb shfryt\u00ebzohen p\u00ebr p\u00ebrshkall\u00ebzim privilegjesh n\u00eb sistemet ku X-server ekzekutohet me t\u00eb drejta root, si edhe p\u00ebr ekzekutim t\u00eb kodit n\u00eb distanc\u00eb n\u00eb konfigurime ku p\u00ebr qasje p\u00ebrdoret ridrejtimi i sesionit X11 p\u00ebrmes SSH.     <\/p>\n<p>Problemet e zbuluara:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2023-6816 \u2014 bufrim i tepruar q\u00eb ndodh kur nj\u00eb indek i gabuar i array-t kalon n\u00eb operacionet DeviceFocusEvent dhe ProcXIQueryPointer. Vulnerabiliteti shkaktohet nga fakti se serveri X alokojn\u00eb memorie p\u00ebr array duke marr\u00eb parasysh numrin real t\u00eb butonave, nd\u00ebrsa k\u00ebrkesa lejon q\u00eb t\u00eb p\u00ebrdoren vlera deri n\u00eb 255 n\u00eb array. Problemi fillon q\u00eb nga lirimi i xorg-server-1.13.0 (viti 2012).\n<li class=\"l\"> CVE-2024-0229 \u2014 shkruaj n\u00eb nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb bufrim t\u00eb p\u00ebrmes lidhjes s\u00eb p\u00ebrs\u00ebritur me nj\u00eb master-device tjet\u00ebr n\u00eb nj\u00eb konfigurim ku pajisja \u00ebsht\u00eb e pajisur nj\u00ebkoh\u00ebsisht me elemente input t\u00eb klas\u00ebs \"buton\" (button) dhe \"\u00e7el\u00ebs\" (key), dhe numri i butonave (parametri numButtons) \u00ebsht\u00eb vendosur n\u00eb 0. Problemi fillon q\u00eb nga lirimi i xorg-server-1.1.1 (viti 2006).\n<li class=\"l\"> CVE-2024-21885 \u2014 bufrim i tepruar n\u00eb funksionin XISendDeviceHierarchyEvent, ndodh kur nj\u00eb pajisje me nj\u00eb identifikues t\u00eb caktuar hiqet dhe nj\u00eb pajisje me t\u00eb nj\u00ebjtin identifikues shtohet brenda nj\u00eb k\u00ebrkese. Vulnerabiliteti shkaktohet nga fakti se n\u00eb nj\u00eb operacion t\u00eb dyfisht\u00eb p\u00ebr nj\u00eb identifikues shkruhen dy ekzemplar\u00eb t\u00eb struktur\u00ebs xXIHierarchyInfo, nd\u00ebrsa funksioni XISendDeviceHierarchyEvent alokojn\u00eb memorie duke llogaritur p\u00ebr nj\u00eb ekzemplar. Problemi fillon q\u00eb nga lirimi i xorg-server-1.10.0 (viti 2010).\n<li class=\"l\"> CVE-2024-21886 \u2014 bufrim i tepruar n\u00eb funksionin DisableDevice, ndodh kur \u00e7aktivizohet master-device nd\u00ebrsa slave-devices jan\u00eb tashm\u00eb t\u00eb \u00e7aktivizuara. Vulnerabiliteti shkaktohet nga llogaritja e gabuar e madh\u00ebsis\u00eb s\u00eb struktur\u00ebs p\u00ebr ruajtjen e list\u00ebs s\u00eb pajisjeve. Problemi fillon q\u00eb nga lirimi i xorg-server-1.13.0 (viti 2012).\n<li class=\"l\">  CVE-2024-0409, CVE-2024-0408 \u2014 d\u00ebmtimi i kontekstit SELinux kur aktivizohet xserver_object_manager dhe punohet me klientin ose krijohet GLX PBuffer.         <\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60456\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.11 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.4, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 Wayland. \u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 X-\u0441\u0435\u0440\u0432\u0435\u0440 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112973","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.11 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.4, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 X.Org Server 21.1.11 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.11 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.4, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-01-18T09:28:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-01-18T09:28:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u00ebrdit\u00ebsimi i X.Org Server 21.1.11 me rregullimin e 6 dob\u00ebsive | ProHoster","description":"Jan\u00eb publikuar versionet korrigjuese X.Org Server 21.1.11 dhe komponenti DDX (Device-Dependent X) xwayland 23.2.4, i cili mund\u00ebson nisjen e X.Org Server p\u00ebr ekzekutimin e aplikacioneve X11 n\u00eb mjedise t\u00eb bazuara n\u00eb t\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 X.Org Server 21.1.11 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 X.Org Server 21.1.11 \u0438 DDX-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 (Device-Dependent X) xwayland 23.2.4, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a X.Org Server \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f X11-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-x-org-server-21-1-11-s-ustraneniem-6-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-18T09:28:03+00:00","article:modified_time":"2024-01-18T09:28:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112973"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112973\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112973"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112973"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}