X.Org Struck Again By Multiple Security Issues

Written by Michael Larabel in Linux Security on 28 February 2017 at 03:38 PM EST. 11 Comments
By now you probably know that X.Org's security is in bad shape and routinely new security issues are uncovered and that's the case today.

Multiple X.Org vulnerabilities were published today by X41 D-Sec GmbH, a German security company. There is a timing attack against MIT cookies, a potential use after free in the X.Org Server, weak entropy usage for session keys in libxdm, weak entropy usage in session keys in libice, weak entropy usage in the X.Org Server itself.

The security firm reported these issues last month to the X.Org security team, CVEs were assigned earlier this month, and today the advisories were issued.

More details on this latest round of X.Org security issues via x41-dsec.de.
Related News
About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week