{"id":182538,"date":"2026-07-08T10:54:06","date_gmt":"2026-07-08T08:54:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej"},"modified":"2026-07-08T10:54:06","modified_gmt":"2026-07-08T08:54:06","slug":"obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej","title":{"rendered":"P\u00ebrdit\u00ebsimi X.Org Server 21.1.24, xwayland 24.1.13 dhe libXfont2 2.0.8 me rregullimin e dob\u00ebsive.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Jan\u00eb publikime p\u00ebrmir\u00ebsuese p\u00ebr X.Org Server 21.1.24 dhe komponentin DDX (Device-Dependent X) xwayland 24.1.13, i cili mund\u00ebson funksionimin e X.Org Server p\u00ebr ekzekutimin e aplikacioneve X11 n\u00eb mjedise t\u00eb bazuara n\u00eb Wayland. N\u00eb k\u00ebto versione jan\u00eb rregulluar 2 vulnerabilitete, t\u00eb cilat potencialisht mund t\u00eb shfryt\u00ebzohen p\u00ebr rritjen e privilegjeve n\u00eb sisteme ku X-serveri ekzekutohet me t\u00eb drejtat root, si dhe p\u00ebr ekzekutimin e kodit n\u00eb m\u00ebnyr\u00eb t\u00eb larg\u00ebt n\u00eb konfiguracionesh ku aksesi b\u00ebhet p\u00ebrmes ridirektimit t\u00eb sesionit X11 me SSH. <\/p>\n
Vulnerabilitetet e rregulluara: <\/p>\n
\n
CVE-2026-55999 \u2014 mbushje i tamponit n\u00eb zbatimin e arkitektur\u00ebs 2D-t\u00eb accelerimit Glamor, i cili preku funksionin glamor_font_get(), i cili nd\u00ebrton teksturat e atlast t\u00eb shkronjave p\u00ebrmes vizatimit t\u00eb \u00e7do glyph n\u00eb nj\u00eb tampon t\u00eb p\u00ebrbashk\u00ebt. Problemi shkaktohet nga fakti se madh\u00ebsia e tamponit p\u00ebrcaktohet mbi baza t\u00eb parametrave t\u00eb caktuar n\u00eb shkronj\u00eb, nd\u00ebrsa kur krijohen t\u00eb dh\u00ebnat e kopjuara n\u00eb tampon p\u00ebrdoren metrika individuale p\u00ebr \u00e7do glyph. P\u00ebr t\u00eb shfryt\u00ebzuar k\u00ebt\u00eb dob\u00ebsi, sulmuesi mund t\u00eb p\u00ebrgatis\u00eb nj\u00eb sked\u00eb t\u00eb formatuar n\u00eb PCF, n\u00eb t\u00eb cil\u00ebn jan\u00eb t\u00eb caktuara metrika t\u00eb gabuara p\u00ebr glyph, q\u00eb kalojn\u00eb kufijt\u00eb e madh\u00ebsis\u00eb s\u00eb kujtes\u00ebs t\u00eb caktuar p\u00ebr to. Mbushja ndodh n\u00eb sistemet q\u00eb p\u00ebrdorin backend-in glamor (Xorg me drejtuesin modesetting dhe Xwayland) gjat\u00eb vizatimit t\u00eb tekstit me shkronj\u00ebn problematike.\n
CVE-2026-56000 \u2014 referenca n\u00eb memorje pas \u00e7lirimit n\u00eb funksionin CommonMakeCurrent() gjat\u00eb p\u00ebrpunimit t\u00eb konteksteve GLX contextTags. Problemi \u00ebsht\u00eb shkaktuar nga fakti se gjat\u00eb p\u00ebrdorimit t\u00eb funksionit realloc() t\u00eb dh\u00ebnat e array-it cl->contextTags ishin zhvendosur n\u00eb nj\u00eb tampon t\u00eb ri, por n\u00eb p\u00ebrdorim mbeti nj\u00eb tregues q\u00eb referonte tamponin e vjet\u00ebr. P\u00ebr t\u00eb iniciuar zhvendosjen e tamponit, klienti mund t\u00eb p\u00ebrdorte t\u00eb gjitha elementet e alokuara p\u00ebr GLX-context, dhe m\u00eb pas t\u00eb krijonte nj\u00eb kontekst shtes\u00eb. <\/ul>\n
P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb theksohet l\u00ebshimi i bibliotek\u00ebs libXfont 2.0.8, e cila p\u00ebrdoret n\u00eb serverin X. N\u00eb k\u00ebt\u00eb p\u00ebrdit\u00ebsim jan\u00eb eliminuar 3 vulnerabilitete (CVE-2026-56001, CVE-2026-56002, CVE-2026-56003), t\u00eb cilat \u00e7ojn\u00eb n\u00eb mbushje t\u00eb tamponit gjat\u00eb p\u00ebrpunimit t\u00eb shenjave t\u00eb dizajnuara n\u00eb formatin PCF. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"