{"id":122099,"date":"2025-02-26T14:22:10","date_gmt":"2025-02-26T12:22:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-16-s-ustraneniem-8-uyazvimostej"},"modified":"2025-02-26T14:22:10","modified_gmt":"2025-02-26T12:22:10","slug":"obnovlenie-x-org-server-21-1-16-s-ustraneniem-8-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-16-s-ustraneniem-8-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsimi i X.Org Server 21.1.16 me korrigjimin e 8 dob\u00ebsive","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb publikuar versione corrective t\u00eb X.Org Server 21.1.16 dhe komponentit DDX (Device-Dependent X) xwayland 24.1.6, i cili mund\u00ebson funksionimin e X.Org Server p\u00ebr t\u00eb lejuar ekzekutimin e aplikacioneve X11 n\u00eb mjedise t\u00eb bazuara n\u00eb Wayland. N\u00eb versionin e ri t\u00eb X.Org Server jan\u00eb eliminuar 8 dob\u00ebsi. Problemet potencialisht mund t\u00eb shfryt\u00ebzohen p\u00ebr t\u00eb rritur privilegjet n\u00eb sisteme ku X-server funksionon me t\u00eb drejta root, si dhe p\u00ebr ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb konfigurime ku p\u00ebr ata qasje p\u00ebrdoret redirektimi i seanc\u00ebs X11 p\u00ebrmes SSH. <\/p>\n
Vulnerabilitetet e identifikuara: <\/p>\n
\n
CVE-2025-26594 \u2014 referim i nj\u00eb zone kujtese t\u00eb liruar (Use-after-free) n\u00eb menaxherin e kursorit t\u00eb dritares kryesore. Vulnerabiliteti \u00ebsht\u00eb shfaqur q\u00eb nga l\u00ebshimi i X11R6.6 n\u00eb vitin 2001.\n
CVE-2025-26595 \u2014 mbushja e tamponit n\u00eb funksionin XkbVModMaskText(), e shkaktuar nga kopjimi i emrave t\u00eb modifikator\u00ebve virtual n\u00eb nj\u00eb tampon t\u00eb fiksuar pa verifikimin e duhur t\u00eb madh\u00ebsis\u00eb. Vulnerabiliteti \u00ebsht\u00eb shfaqur duke filluar nga X11R6.1 (viti 1996).\n
CVE-2025-26596 \u2014 mbushja e tamponit n\u00eb funksionin XkbWriteKeySyms(), e lidhur me faktin se madh\u00ebsia e llogaritur nga funksioni XkbSizeKeySyms() nuk p\u00ebrputhej me madh\u00ebsin\u00eb e t\u00eb dh\u00ebnave q\u00eb shkruheshin nga funksioni XkbWriteKeySyms(). Vulnerabiliteti \u00ebsht\u00eb shfaqur q\u00eb nga versioni i par\u00eb xkb.c, i p\u00ebrfshir\u00eb n\u00eb X11R6 (viti 1994).\n
CVE-2025-26597 \u2014 mbushja e tamponit n\u00eb funksionin XkbChangeTypesOfKey() p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb madh\u00ebsis\u00eb s\u00eb gabuar t\u00eb tabel\u00ebs s\u00eb kodit t\u00eb simboleve. Vulnerabiliteti \u00ebsht\u00eb shfaqur q\u00eb nga l\u00ebshimi i X11R6.1 (viti 1996).\n
CVE-2025-26598 \u2014 referimi i t\u00eb dh\u00ebnave p\u00ebrtej tamponit n\u00eb funksionin CreatePointerBarrierClient(), e shkaktuar nga kthejja e nj\u00eb indeksi t\u00eb gabuar n\u00eb list\u00eb n\u00eb rast t\u00eb nj\u00eb k\u00ebrkese t\u00eb d\u00ebshtuar p\u00ebr pajisjen e kontrollit t\u00eb treguesit. Vulnerabiliteti \u00ebsht\u00eb shfaqur duke filluar nga xorg-server 1.14.0 (viti 2013).\n
CVE-2025-26599 \u2014 referimi n\u00eb nj\u00eb tregues t\u00eb pa inicializuar n\u00eb funksionin compRedirectWindow() kur nuk \u00ebsht\u00eb e mundur t\u00eb alokohet kujtes\u00eb p\u00ebr nj\u00eb hart\u00eb bitmap. Vulnerabiliteti \u00ebsht\u00eb shfaqur duke filluar nga Xorg 6.8.0 (viti 2004).\n
CVE-2025-26600 \u2014 referimi i nj\u00eb zone kujtese t\u00eb liruar n\u00eb funksionin PlayReleasedEvents() gjat\u00eb nxjerrjes s\u00eb nj\u00eb pajisjeje t\u00eb bllokuar, p\u00ebr t\u00eb cil\u00ebn mbeten ngjarje t\u00eb pa p\u00ebrpunuara. Vulnerabiliteti \u00ebsht\u00eb shfaqur duke filluar nga X11R5 (viti 1991).\n
CVE-2025-26601 \u2014 referimi i nj\u00eb zone kujtese t\u00eb liruar n\u00eb funksionin SyncInitTrigger(). Vulnerabiliteti \u00ebsht\u00eb shfaqur duke filluar nga X11R6 (viti 1994). <\/ul>\n