{"id":168785,"date":"2026-04-15T11:12:00","date_gmt":"2026-04-15T09:12:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-22-s-ustraneniem-5-uyazvimostej"},"modified":"2026-04-15T11:12:00","modified_gmt":"2026-04-15T09:12:00","slug":"obnovlenie-x-org-server-21-1-22-s-ustraneniem-5-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-x-org-server-21-1-22-s-ustraneniem-5-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsimi i X.Org Server 21.1.22 me eliminimin e 5 dob\u00ebsive","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb publikuar versionet e korrigjura X.Org Server 21.1.22 dhe komponenti DDX (Device-Dependent X) xwayland 24.1.10, i cili mund\u00ebson ekzekutimin e X.Org Server p\u00ebr organizimin e aplikacioneve X11 n\u00eb mjedise t\u00eb bazuara n\u00eb Wayland. N\u00eb versionet e reja jan\u00eb eliminuar 5 vulnerabilitete. Disa vulnerabilitete potencialisht mund t\u00eb shfryt\u00ebzohen p\u00ebr t\u00eb rritur privilegjet n\u00eb sisteme ku X-server ekzekutohet me t\u00eb drejtat e root, si dhe p\u00ebr ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb konfigurimet ku p\u00ebrdoret ridrejtimi i seanc\u00ebs X11 p\u00ebrmes SSH. <\/p>\n
Vulnerabilitetet e rregulluara: <\/p>\n
\n
CVE-2026-34001 \u2014 akses n\u00eb memorie pas lirimit t\u00eb saj (Use-after-free) n\u00eb funksionin miSyncTriggerFence(). Vulnerabiliteti shfaqet me l\u00ebshimin e xorg-server 1.9.0 (viti 2010).\n
CVE-2026-33999 \u2014 mbushje t\u00eb numrit t\u00eb plot\u00eb p\u00ebrmes nj\u00eb n\u00ebnfundore (underflow) n\u00eb funksionin XkbSetCompatMap(), duke \u00e7uar n\u00eb leximin e t\u00eb dh\u00ebnave nga jasht\u00eb buffers gjat\u00eb p\u00ebrpunimit t\u00eb k\u00ebrkesave t\u00eb formuluara n\u00eb m\u00ebnyr\u00eb speciale. Vulnerabiliteti shfaqet me l\u00ebshimin e X11R6.6 (viti 2001).\n
CVE-2026-34000 \u2014 leximi nga jasht\u00eb buffers n\u00eb funksionin XkbAddGeomKeyAlias, shkaktuar nga mungesa e kontrollit t\u00eb p\u00ebrputhshm\u00ebris\u00eb s\u00eb madh\u00ebsis\u00eb s\u00eb emrit t\u00eb \u00e7el\u00ebsit t\u00eb kaluar me bufferin e alokuar. Vulnerabiliteti shfaqet me l\u00ebshimet e xorg-server 21.1.4 dhe xwayland 22.1.3 (viti 2022).\n
CVE-2026-34002 \u2014 leximi nga jasht\u00eb buffers n\u00eb funksionin CheckModifierMap() p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb kontrollit t\u00eb p\u00ebrputhshm\u00ebris\u00eb midis numrit t\u00eb \u00e7el\u00ebsave t\u00eb dh\u00ebn\u00eb n\u00eb k\u00ebrkes\u00eb dhe numrit aktual t\u00eb parametrave t\u00eb d\u00ebrguar. Vulnerabiliteti shfaqet me l\u00ebshimin e X11R6.6 (viti 2001).\n
CVE-2026-34003 \u2014 mbushje e bufferit n\u00eb funksionin XKB CheckKeyTypes(), duke \u00e7uar n\u00eb leximin e t\u00eb dh\u00ebnave nga jasht\u00eb buffers p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb kontrollit t\u00eb p\u00ebrputhshm\u00ebris\u00eb s\u00eb madh\u00ebsis\u00eb s\u00eb bufferit me t\u00eb dh\u00ebnat e d\u00ebrguara n\u00eb k\u00ebrkes\u00eb. Vulnerabiliteti shfaqet me l\u00ebshimin e X11R6.6 (viti 2001). <\/ul>\n