{"id":114795,"date":"2024-04-05T00:25:42","date_gmt":"2024-04-04T22:25:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-12-s-ustraneniem-4-uyazvimostej"},"modified":"2024-04-05T00:25:42","modified_gmt":"2024-04-04T22:25:42","slug":"obnovlenie-x-org-server-21-1-12-s-ustraneniem-4-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-x-org-server-21-1-12-s-ustraneniem-4-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsimi X.Org Server 21.1.12 me rregullimin e 4 vulnerabiliteteve","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sapohet l\u00ebshimi i versioneve korrigjuese X.Org Server 21.1.12 dhe komponentit DDX (Device-Dependent X) xwayland 23.2.5, i cili mund\u00ebson startimin e X.Org Server p\u00ebr t\u00eb mund\u00ebsuar ekzekutimin e aplikacioneve X11 n\u00eb ambiente t\u00eb bazuara n\u00eb Wayland. N\u00eb versionin e ri t\u00eb X.Org Server jan\u00eb eliminuar 4 vulnerabilitete. Nj\u00eb vulnerabilitet mund t\u00eb shfryt\u00ebzohet p\u00ebr t\u00eb rritur privilegjet n\u00eb sisteme ku X-serverit ekzekutohet me t\u00eb drejtat e root, si dhe p\u00ebr ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb konfigurime ku p\u00ebr t\u00eb q\u00ebn\u00eb e mundur qasja p\u00ebrdoret ridrejtime t\u00eb sesionit X11 p\u00ebrmes SSH. <\/p>\n

Vulnerabilitetet e tjera tri mund t\u00eb \u00e7ojn\u00eb n\u00eb rrjedhjen e p\u00ebrmbajtjes s\u00eb memories server\u00eb<\/a> ose n\u00eb \u00e7rregullim t\u00eb sistemit. K\u00ebto tri vulnerabilitete shfryt\u00ebzohen p\u00ebrmes p\u00ebrdorimit n\u00eb an\u00ebn e klientit t\u00eb nj\u00eb rendi t\u00eb ndrysh\u00ebm t\u00eb bajt\u00ebve krahasuar me server<\/a>. N\u00eb k\u00ebt\u00eb p\u00ebrputhje, numri i ri ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb bllokuar lidhjet e klient\u00ebve nga sisteme q\u00eb kan\u00eb nj\u00eb renditje tjet\u00ebr bajtash. P\u00ebr t\u00eb \u00e7aktivizuar, mund t\u00eb p\u00ebrdoret parametri i konfigurimit \u00abAllowByteSwappedClients\u00bb ose opsioni i linj\u00ebs s\u00eb komand\u00ebs \u00ab+byteswappedclients\u00bb. <\/p>\n

Ndryshimi i vler\u00ebs n\u00eb parazgjedhje lejon mbrojtjen nga vulnerabilitete t\u00eb tjera t\u00eb mundshme q\u00eb manipulojn\u00eb rendin e bajt\u00ebve. Q\u00ebllimi i atyre vulnerabiliteteve \u00ebsht\u00eb se ndryshimi i rendit t\u00eb bajt\u00ebve p\u00ebr vlerat me madh\u00ebsi t\u00eb caktuar \u00e7on n\u00eb interpretimin e gabuar dhe leximin ose shkrimin n\u00eb memorie me nj\u00eb madh\u00ebsi q\u00eb \u00ebsht\u00eb me t\u00eb v\u00ebrtet\u00eb m\u00eb e madhe se sa ajo q\u00eb mb\u00ebshtetet nga buffer-i i ndar\u00eb. <\/p>\n

P\u00ebr momentin, mb\u00ebshtetja p\u00ebr klient\u00eb me rend t\u00eb ndrysh\u00ebm bajt\u00ebsh vazhdon t\u00eb mbetet, megjith\u00ebse n\u00eb praktik\u00eb, konvertimi i rendit t\u00eb bajt\u00ebve \u00ebsht\u00eb p\u00ebrdorur jasht\u00ebzakonisht rrall\u00eb koh\u00ebt e fundit, pasi stacionet e pun\u00ebs ku ekzekutohet X-server zakonisht jan\u00eb t\u00eb pajisura me procesor\u00eb t\u00eb rendit bajt\u00ebsh little-endian (nga bajti m\u00eb t\u00eb vegj\u00ebl n\u00eb ato m\u00eb t\u00eb m\u00ebdhenj) dhe lidhja me ta e klient\u00ebve X me rend big-endian, si platforma s390x (IBM zSystems), \u00ebsht\u00eb nj\u00eb rast shum\u00eb i rrall\u00eb. <\/p>\n

Problemet e zbuluara: <\/p>\n