Trend Micro Uncovers Yet Another X.Org Server Vulnerability: CVE-2023-1393

[phoronix]

Phoronix: Trend Micro Uncovers Yet Another X.Org Server Vulnerability: CVE-2023-1393

For over a decade now the X.Org Server has been seeing routine security disclosures in its massive codebase with some security researchers saying it's even worse than it looks and security researchers frequently finding multiple vulnerabilities at a time in the large and aging code-base that these days rarely sees new feature work. Today another disclosure was made by the folks with the Trend Micro Zero Day Initiative...

https://www.phoronix.com/news/X.Org-Server-CVE-2023-1393

[Weasel]

Remember, each CVE fixed is one step closer to perfection!

[Sethox]

Remember, each CVE fixed is one step closer to perfection!

True, very true. But people want active development so the project evolves, not stagnate with maintenance.

[piotrj3]

Opens bag of popcorn
Rewrite X in Rust and such memory issues are gone.

[kylew77]

I for one am glad Xorg exists because you can do client server stuff like x11 forwarding! Makes clients like OpenBSD more usable where there is no Linux emulator or wine and your only choice for accelerated virtualization is VMM. Wayland has no equivalent last time I checked to x11 forwarding.

[avis]

The world has ended, as literally every Linux user uses "SSH X forwarding sessions."

Not.

[mSparks]

The world has ended, as literally every Linux user uses "SSH X forwarding sessions."

Not.

By your logic we should get rid of accessibility options while we are at it, because literally every linux user is blind, not.
amIright?

[KingSpammerNerd]

Opens bag of popcorn
Rewrite X in Rust and such memory issues are gone.

That's actually a great idea. That is, assuming anyone's actually willing to work on it.

[ClosedSource]

Opens bag of popcorn
Rewrite X in Rust and such memory issues are gone.

I'm not fond of Rust because of the way it is governed and because it has a crusading fanbase. But that is indeed where Rust is useful.

[Sethox]

I'm not fond of Rust because of the way it is governed...

Can you clarify?