Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years
Crosspost of https://lemmy.sdf.org/post/24401210
https://www.phoronix.com/news/X.Org-CVE-2024-9632Open linkView original on lemmy.dbzer0.com128
Comments15https://www.phoronix.com/news/X.Org-CVE-2024-9632Open linkView original on lemmy.dbzer0.com
That thumbnail lol
Perfect Christmas gift idea
Sysadmin job be like
I've got a few old PCI cards around somewhere. I should pull one of them out and give them a try at this.
If this metal thingy is anything like the one used as dust covers inside PC cases it'll just bend (I've actually tried to use one as a bottle opener).
Works well for cans, though, in my experience.
For a while I had a fiber SFP that was amazing at opening cans, too.
Its good that people care enough to keep finding these vulnerabilities
Yeah, This case especially since it includes XWayland
Yet another, "well, yeah, technically it has security ramifications, but I'm not admin'ing any multiuser machines, so I'm not losing any sleep over it" bug.
Rootless Xorg is still a niche thing?
What do you expect? X11 is in maintenance mode. Although I'll miss Polybar, I won't miss the protocol.
https://github.com/Alexays/Waybar/wiki/Examples
I think it's still valuable to document these things so that the users who insist on sticking with X11 can receive a healthy dose of this (replace diapers with vulnerabilities) when the proverbial shit hits the fan and it becomes as hackable as Windows XP
Is it? Afaik it very much is not
Well, freedesktop.org is now focused on Wayland (Xorg is not getting HDR, new synchronization protocols, or proper VRR (unless through XWayland), while Wayland is). RedHat RHEL marked Xorg as deprecated last year and will not even support it by next year (RHEL 10). KDE and GNOME also default to Wayland.