{"id":182538,"date":"2026-07-08T10:54:06","date_gmt":"2026-07-08T08:54:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej"},"modified":"2026-07-08T10:54:06","modified_gmt":"2026-07-08T08:54:06","slug":"obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsimi i X.Org Server 21.1.24, xwayland 24.1.13 dhe libXfont2 2.0.8 me rregullimin e dob\u00ebsive","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb publikuar p\u00ebrdit\u00ebsimet korrigjuese t\u00eb X.Org Server 21.1.24 dhe komponentit DDX (Device-Dependent X) xwayland 24.1.13, i cili mund\u00ebson ekzekutimin e X.Org Server p\u00ebr realizimin e aplikacioneve X11 n\u00eb mjedise t\u00eb bazuara n\u00eb Wayland. N\u00eb versionet e reja jan\u00eb eliminuar 2 vulnerabilitete, t\u00eb cilat potencialisht mund t\u00eb shkaktojn\u00eb rritje privilegjesh n\u00eb sisteme ku X-serveri ekzekutohet me t\u00eb drejtat e root, si dhe p\u00ebr ekzekutimin e kodit n\u00eb distanc\u00eb n\u00eb konfiguracyone ku aksesimi b\u00ebhet p\u00ebrmes ridrejtimit t\u00eb seanc\u00ebs X11 me SSH. <\/p>\n
Vulnerabilitetet e korrigjuara: <\/p>\n
\n
CVE-2026-55999 \u2014 mbushje e buffers n\u00eb realizimin e arkitektur\u00ebs 2D t\u00eb p\u00ebrshpejtimit Glamor, q\u00eb prek funksionin glamor_font_get(), i cili krijon atlastin tekstor t\u00eb fontit p\u00ebrmes vizatimit t\u00eb \u00e7do gili n\u00eb nj\u00eb buffer t\u00eb p\u00ebrgjithsh\u00ebm. Problemi shkaktohet nga fakti se madh\u00ebsia e buffers p\u00ebrcaktohej mbi baz\u00ebn e parametrave t\u00eb caktuar n\u00eb font, nd\u00ebrsa kur krijoheshin t\u00eb dh\u00ebnat q\u00eb do kopjoheshin n\u00eb buffer, p\u00ebrdoren metrikat individuale t\u00eb \u00e7do gili. P\u00ebr t\u00eb shfryt\u00ebzuar k\u00ebt\u00eb vulnerabilitet, sulmuesi mund t\u00eb p\u00ebrgatis\u00eb nj\u00eb sked\u00eb t\u00eb formatuar posa\u00e7\u00ebrisht n\u00eb formatin PCF, ku jan\u00eb caktuar metrika t\u00eb gili t\u00eb pasakta, q\u00eb dalin jasht\u00eb madh\u00ebsis\u00eb s\u00eb memorjes t\u00eb ndar\u00eb p\u00ebr to. Mbushja ndodh n\u00eb sistemet q\u00eb p\u00ebrdorin backendin glamor (Xorg me driver modesetting dhe Xwayland) kur vizatohet teksti me fontin problematik.\n
CVE-2026-56000 \u2014 qasje n\u00eb memorje pas \u00e7lirimit t\u00eb saj n\u00eb funksionin CommonMakeCurrent() gjat\u00eb p\u00ebrpunimit t\u00eb GLX contextTags. Problemi shkaktohet nga fakti se kur p\u00ebrdorej funksioni realloc(), t\u00eb dh\u00ebnat e vargut cl->contextTags l\u00ebvizeshin n\u00eb nj\u00eb buffer t\u00eb ri, por n\u00eb p\u00ebrdorim mbetej nj\u00eb tregues q\u00eb referohej n\u00eb bufferin e vjet\u00ebr. P\u00ebr t\u00eb iniciuar l\u00ebvizjen e buffers, klienti mund t\u00eb merrte t\u00eb gjitha elementet e ndara p\u00ebr GLX-kontekste n\u00eb varg, e m\u00eb pas t\u00eb krijonte nj\u00eb kontekst shtes\u00eb. <\/ul>\n
Shtes\u00eb, mund t\u00eb theksohet lirimi i bibliotek\u00ebs libXfont 2.0.8, e cila p\u00ebrdoret n\u00eb X-server. N\u00eb p\u00ebrdit\u00ebsim jan\u00eb eliminuar 3 vulnerabilitete (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003), q\u00eb \u00e7ojn\u00eb n\u00eb mbushjen e buffers gjat\u00eb analiz\u00ebs s\u00eb fonteve t\u00eb formatuara posa\u00e7\u00ebrisht n\u00eb formatin PCF. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"