The High-Profile X.Org / Linux Kernel Security Bug

[curaga]

Hm, no fix in .33? I'm not entirely confident on .35.2 either, it came out way too fast (as did .35.1).

[md1032]

Uhm, Michael explicitly mentions that it's possible to run X as non-root with the proprietary nvidia-driver.

He updated the article. It didn't say that originally.

[.CME.]

Uhm, Michael explicitly mentions that it's possible to run X as non-root with the proprietary nvidia-driver.

whoops, sorry for that , that happens if you read articles when you are tired

[.CME.]

He updated the article. It didn't say that originally.

doublepostedit: ok, then i didn't missed it back then

[gentoofu]

Hm, no fix in .33? I'm not entirely confident on .35.2 either, it came out way too fast (as did .35.1).

Yeah, it's missing three commits. The missing patches are in .35.3-rc1.

[kraftman]

I'm speechless... All the time we joke about Windows security...

Question: We I get a backported 2.6.34/2.6.35 kernel for Lucid? Don't want to reinstall OS in a year

Unknown bug is a different situation then known security bugs unfixed for months. The same about design, you won't affect Linux by simply plugging USB drive.