{"id":182538,"date":"2026-07-08T10:54:06","date_gmt":"2026-07-08T08:54:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej"},"modified":"2026-07-08T10:54:06","modified_gmt":"2026-07-08T08:54:06","slug":"obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/obnovlenie-x-org-server-21-1-24-xwayland-24-1-13-i-libxfont2-2-0-8-s-ustraneniem-uyazvimostej","title":{"rendered":"Uppdatering av X.Org Server 21.1.24, xwayland 24.1.13 och libXfont2 2.0.8 med \u00e5tg\u00e4rder mot s\u00e5rbarheter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Korrigerande versioner av X.Org Server 21.1.24 och DDX-komponenten (Device-Dependent X) xwayland 24.1.13 har publicerats, vilket m\u00f6jligg\u00f6r att k\u00f6ra X.Org Server f\u00f6r att st\u00f6dja k\u00f6rning av X11-applikationer i Wayland-baserade milj\u00f6er. I de nya versionerna har tv\u00e5 s\u00e5rbarheter \u00e5tg\u00e4rdats som potentiellt kan utnyttjas f\u00f6r att h\u00f6ja privilegier i system d\u00e4r X-servern k\u00f6rs med root-r\u00e4ttigheter, samt f\u00f6r fj\u00e4rr exekvering av kod i konfigurationer d\u00e4r sessionen X11 f\u00e5r \u00e5tkomst via SSH-omdirigering. <\/p>\n
\u00c5tg\u00e4rdade s\u00e5rbarheter: <\/p>\n
\n
CVE-2026-55999 \u2014 buffer overflow in the implementation of 2D acceleration architecture Glamor, affecting the function glamor_font_get(), which builds a font texture atlas by rendering each glyph into a common buffer. The issue is caused by the buffer size being determined based on parameters specified in the font, while the individual metrics of each glyph were used when creating the data copied to the buffer. To exploit the vulnerability, an attacker could prepare a specially crafted file in PCF format, which specifies incorrect glyph metrics that exceed the allocated memory size. The overflow occurs on systems using the glamor backend (Xorg with modesetting driver and Xwayland) when rendering text with the problematic font.\n
CVE-2026-56000 \u2014 use-after-free in the CommonMakeCurrent() function when processing GLX contextTags. The issue arises because when using the realloc() function, the data from the cl->contextTags array was moved to a new buffer, but a pointer referring to the old buffer remained in use. To initiate the buffer move, the client could occupy all allocated elements of the GLX context array and then create an additional context. <\/ul>\n