Announcement

Collapse
No announcement yet.

More X.Org Security Vulnerabilities Published, Date Back To X11R5

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • More X.Org Security Vulnerabilities Published, Date Back To X11R5

    Phoronix: More X.Org Security Vulnerabilities Published, Date Back To X11R5

    There's been several high profile open-source security bugs uncovered recently from the well known OpenSSL heartbleed bug to an issue with the Linux kernel. Unfortunately, there's more to report today, but this time in the space of X.Org with multiple security issues that have been present going back to X11R5, which was released in 1991...

    http://www.phoronix.com/vr.php?view=MTY4OTA

  • #2
    Good thing everybody (read: only specialized thin client setups) runs the font server.

    Comment


    • #3
      I used to run a ttf font server maybe 10 years ago to allow legacy apps to use ttf fonts... This bug should be fixed, of course, however is not as severe as the title and the abstract suggest.

      Comment


      • #4
        Yes, it has some vulnerabilities, but Wayland/Weston no? are perfect? LOL... Wayland and Weston will have more and dangerous bugs

        Comment


        • #5
          Originally posted by philipmorris View Post
          Yes, it has some vulnerabilities, but Wayland/Weston no? are perfect? LOL... Wayland and Weston will have more and dangerous bugs
          You're funny!

          Comment


          • #6
            Originally posted by philipmorris View Post
            Yes, it has some vulnerabilities, but Wayland/Weston no? are perfect? LOL... Wayland and Weston will have more and dangerous bugs
            Wayland is an API; if it has any bugs, it'll cause interoperability, portability, or compatibility problems--security problems, not so much.

            Weston (and other Wayland implementations) will have bugs, but most software does. If you had security problems with Gnome, you still will, but with Wayland you won't have to worry about that other process (the X server) being a potential attack vector.

            Comment


            • #7
              Originally posted by philipmorris View Post
              Wayland and Weston will have more and dangerous bugs
              And you conclude this based on...what, exactly?

              Comment


              • #8
                X.org: even its bugs are amazing.

                Comment


                • #9
                  Originally posted by TheBlackCat View Post
                  And you conclude this based on...what, exactly?
                  First because is developed for be used primarily in smartphones and second because is developed in a race against canonical. And i know Wayland development begun before but righ now is a race
                  Last edited by philipmorris; 05-13-2014, 02:05 PM. Reason: primarily

                  Comment


                  • #10
                    Originally posted by philipmorris View Post
                    First because is developed for be used primarily in smartphones and second because is developed in a race against canonical.
                    Ignoring the fact that neither is actually true (it is true for Mir but not Wayland), there is no reason the first one would lead to bugs at all, and there is no reason the second would automatically lead to more bugs than something like xorg that is full of decades of legacy cruft that the current developers don't even understand.

                    Comment

                    Working...
                    X