X.Org Struck Again By Multiple Security Issues

By now you probably know that X.Org's security is in bad shape and routinely new security issues are uncovered and that's the case today.

Multiple X.Org vulnerabilities were published today by X41 D-Sec GmbH, a German security company. There is a timing attack against MIT cookies, a potential use after free in the X.Org Server, weak entropy usage for session keys in libxdm, weak entropy usage in session keys in libice, weak entropy usage in the X.Org Server itself.

The security firm reported these issues last month to the X.Org security team, CVEs were assigned earlier this month, and today the advisories were issued.

More details on this latest round of X.Org security issues via x41-dsec.de.