X.Org Hit By New Security Vulnerabilities - Two Date Back To 1988 With X11R2

[dec05eba]

Note that it's bugs in the client libraries, not the xorg server. You should only be worried if you connect to a malicious server, but nobody connects to a random persons X server. It's a nothing burger.

[MorrisS.]

wlroots:

Implement vulkan renderer (merged)

staging/tearing-control: Add protocol support (merged)
and used in hyprland Tearing implementation (v3) (merged)

Add explicit synchronization, with timelines (closed)
Add explicit synchronization, with timelines, take 2 (open)

It seems a good process. Now, the vulkan matter relate to the fact that Vulkan is explicit sync unlike Opengl. So the compositors should become Vulkan capable. Once the interaction Wayland+Vulcan+explicit sync is assured, wayland Oses will be arised. A new era where Xorg and opengl will stay just for legacy software and legacy hardware as well in legacy linux Oses, so to avoid to penalize some kind of machine owned by a specific group of users.

One exhaustive example as linux software: chromium. Chromium is waiting for webgpu in order to take benefit from Vulkan, it is Vulkan ready and also Wayland ready.

[higgslagrangian]

If they're saying it to one person they are probably saying it to lots of people.

Oh, sure they are. I guess Debian, Fedora, Ubuntu, etc. (all the minor league players, you know?) will stop defaulting to Wayland after YEARS, because of some hear-say.

But since you tell me that it's not ready for production, I guess I'll stop using it after 6 (!) years in freaking production. Thanks for letting me know!

[finalzone]

Major distros are not used in production systems, no one uses Ubuntu, Fedora, Arch, on a production system.

Major enterprise distributions like Red Hat Enterprise Linux since release 8 (not sure about SUSE) and its derivative like Alma or Rock Linux like already use Wayland protocol by default for production systems.

[binarybanana]

Remember guys, Wayland is a bad design, too difficult to support, global shortcuts, screen sharing, middle-button paste, you know the drill

Wait, Wayland can't even paste on middle click??

[Slartifartblast]

Ah a good old opensource bunfight, at least we have moved on from Systemd....or have we ?

[avis]

I love Xorg/X11 vulnerabilities.

We've had many dozens of them over the past 30 years, yet I've yet to meet a single person having been hacked using them.

But it won't stop Wayland fans from claiming that Xorg is completely insecure and must be buried

[Volta]

But it won't stop Wayland fans from claiming that Xorg is completely insecure and must be buried

It seems facts are beyond your capacity.

[Volta]

You should turn off your internet too, then you can't get hacked, that's basically what Crapland does with such essential features.

Then you can claim you haven't been open to security holes that were never exploited in the first place, proudly, on your deathbed! Even if you never managed to get online.

Meanwhile we got work to do instead of playing with toys and paranoia like you.

This is how certified clown looks like. You've just proved you have nothing common with serious business. Go, play some minecraft and stop spreading bullshit about security. Shit hole called xorg is enough for minecraft. If you're offline of course.

[MorrisS.]

Real matter is how users can trust developers.