Skip Navigation

Linux @lemmy.ml

wizardbeard @lemmy.dbzer0.com

8mo ago

Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

www.phoronix.com

Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

Crosspost of https://lemmy.sdf.org/post/24401210

Linux @lemmy.world

mox @lemmy.sdf.org

8mo ago

Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

www.phoronix.com /news/X.Org-CVE-2024-9632

17 comments

That thumbnail lol
- Perfect Christmas gift idea
- Sysadmin job be like
- I've got a few old PCI cards around somewhere. I should pull one of them out and give them a try at this.
  
  If this metal thingy is anything like the one used as dust covers inside PC cases it'll just bend (I've actually tried to use one as a bottle opener).
Its good that people care enough to keep finding these vulnerabilities
- Yeah, This case especially since it includes XWayland
- If only for the sake of one's CV. Making your bones by having a couple of 0-days under your belt helps a lot of folks find jobs these days.
Yet another, "well, yeah, technically it has security ramifications, but I'm not admin'ing any multiuser machines, so I'm not losing any sleep over it" bug.
Rootless Xorg is still a niche thing?
What do you expect? X11 is in maintenance mode. Although I'll miss Polybar, I won't miss the protocol.
- https://github.com/Alexays/Waybar/wiki/Examples
- I think it's still valuable to document these things so that the users who insist on sticking with X11 can receive a healthy dose of this (replace diapers with vulnerabilities) when the proverbial shit hits the fan and it becomes as hackable as Windows XP
- Is it? Afaik it very much is not
  
  It is. That's why Wayland is being pushed so hard, it's a codebase that's actually maintainable, with hopefully some more modern design and engineering principles.
  
  Well, freedesktop.org is now focused on Wayland (Xorg is not getting HDR, new synchronization protocols, or proper VRR (unless through XWayland), while Wayland is). RedHat RHEL marked Xorg as deprecated last year and will not even support it by next year (RHEL 10). KDE and GNOME also default to Wayland.

17 comments