{"id":168785,"date":"2026-04-15T11:12:00","date_gmt":"2026-04-15T09:12:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-22-s-ustraneniem-5-uyazvimostej"},"modified":"2026-04-15T11:12:00","modified_gmt":"2026-04-15T09:12:00","slug":"obnovlenie-x-org-server-21-1-22-s-ustraneniem-5-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-22-s-ustraneniem-5-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsimi i X.Org Server 21.1.22 me eliminimin e 5 dob\u00ebsive","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb publikuar versionet korrigjuese t\u00eb X.Org Server 21.1.22 dhe komponentit DDX (Device-Dependent X) xwayland 24.1.10, i cili mund\u00ebson nisjen e X.Org Server p\u00ebr organizimin e ekzekutimit t\u00eb aplikacioneve X11 n\u00eb mjedise t\u00eb bazuara n\u00eb Wayland. N\u00eb versionet e reja jan\u00eb eliminuar 5 dob\u00ebsi. Disa dob\u00ebsi potencialisht mund t\u00eb shfryt\u00ebzohen p\u00ebr t\u00eb rritur privilegjet n\u00eb sisteme ku X-server konsumohet me t\u00eb drejtat root, si dhe p\u00ebr ekzekutimin e kodit n\u00eb m\u00ebnyr\u00eb t\u00eb larg\u00ebt n\u00eb konfigurime ku qasja b\u00ebhet p\u00ebrmes ridrejtimeve t\u00eb seancave X11 p\u00ebrmes SSH. <\/p>\n
Dob\u00ebsit\u00eb e korriguara: <\/p>\n
\n
CVE-2026-34001 — akses n\u00eb memorjen pas l\u00ebshimit t\u00eb saj (Use-after-free) n\u00eb funksionin miSyncTriggerFence(). Vulnerabiliteti shfaqet me publikimin e xorg-server 1.9.0 (viti 2010).\n
CVE-2026-33999 — mbushje t\u00eb numrave q\u00eb ndodhin p\u00ebrpos minimumit (underflow) n\u00eb funksionin XkbSetCompatMap(), q\u00eb \u00e7on n\u00eb leximin e t\u00eb dh\u00ebnave nga zona jasht\u00eb buffers gjat\u00eb trajtimit t\u00eb k\u00ebrkesave t\u00eb dizajnuara posa\u00e7\u00ebrisht. Vulnerabiliteti shfaqet me publikimin e X11R6.6 (viti 2001).\n
CVE-2026-34000 — lexim nga zona jasht\u00eb buffers n\u00eb funksionin XkbAddGeomKeyAlias, e shkaktuar nga mungesa e kontrollit t\u00eb p\u00ebrputhshm\u00ebris\u00eb s\u00eb madh\u00ebsis\u00eb s\u00eb emrit t\u00eb \u00e7el\u00ebsit t\u00eb kaluar me bufferin e ndar\u00eb. Vulnerabiliteti shfaqet me publikimin e xorg-server 21.1.4 dhe xwayland 22.1.3 (viti 2022).\n
CVE-2026-34002 — lexim nga zona jasht\u00eb buffers n\u00eb funksionin CheckModifierMap() p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb kontrollit t\u00eb p\u00ebrputhshm\u00ebris\u00eb s\u00eb numrit t\u00eb \u00e7el\u00ebsave t\u00eb specifikuar n\u00eb k\u00ebrkes\u00eb me numrin aktual t\u00eb parametrave t\u00eb dh\u00ebn\u00eb. Vulnerabiliteti shfaqet me publikimin e X11R6.6 (viti 2001).\n
CVE-2026-34003 — mbushje e buffers n\u00eb funksionin XKB CheckKeyTypes(), q\u00eb \u00e7on n\u00eb leximin e t\u00eb dh\u00ebnave nga zona jasht\u00eb buffers p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb kontrollit t\u00eb p\u00ebrputhshm\u00ebris\u00eb s\u00eb madh\u00ebsis\u00eb s\u00eb buffers me t\u00eb dh\u00ebnat e dh\u00ebna n\u00eb k\u00ebrkes\u00eb. Vulnerabiliteti shfaqet me publikimin e X11R6.6 (viti 2001). <\/ul>\n