X.Org Libraries Hit By Round Of Security Issues

[Rexilion]

For this to work (from what I take it), you would also need to modify on disk binaries to do this. Furthermore, if you take all the effort of using an unprivileged X server, then why not go the last (precious) mile and run an unprivileged client as well?

I have been pondering for a while to use xscreensaver in combination with PAM to use luksSuspend and luksResume to suspend and resume my encrypted partition whenever I enable my screensaver (would be really kewl, no idea if my software appreciates that lol). That would have been the only scenario that I could think of (given that my X server is not privileged, which is (unfortunately) not the case).

OR, I could use sudo and PAM (exec) and be save! =) .

[Vim_User]

Don't worry about it they're geniuses, nothing to worry about. Remember that Linux is invulnerable to security issues and just move along, nothing to see here.

Feel free to fix bugs and security issues yourself, you are a programmer, feel entitled to tell others what they should work on and seem to have enough time at hand to troll around at Phoronix. So when can we see your contributions?

[wargames]

So they are still using strcpy() ?

[mattst88]

Big kudos to Alan for handling this. He's already patched a bunch of these and is streaming patches out for others.

[phoronix]

Phoronix: X.Org Libraries Hit By Round Of Security Issues

It was just last month that there was an X.Org Server security issue dealing with hot-plugging of input devices. Being announced today is a new round of security problems, this time multiple issues dealing with X.Org client libraries...

http://www.phoronix.com/vr.php?view=MTM3NzU