Slashdot Mirror


Just-Announced X.Org Security Flaws Affect Code Dating Back To 1987

An anonymous reader writes Some of the worst X.Org security issues were just publicized in an X.Org security advisory. The vulnerabilities deal with protocol handling issues and led to 12 CVEs published and code dating back to 1987 is affected within X11. Fixes for the X Server are temporarily available via this Git repository.

3 of 172 comments (clear)

  1. Re:Wha?!?!!! Yup, you betcha! by lgw · · Score: 4, Interesting

    MS has had a fully-supported "no GUI" server option since Server 2012, but has been possible to admin CLI-only, without 3rd part add-ins, since 2008 (though the GUI would still be running, if you don't provide remote access to it, it might as well not be), and with 3rd-prty add-ins since 2003.

    However, managing multiple Windows servers is more about group policy than logging into any servers, GUI, CLI, or carrier pigeon. I've worked with management systems for 1000s of Windows servers, and the only reason you'd ever log into a server is to recover if something went horribly with a new deployment, and you wanted to find out why (to debug your deployment - just recovering the server was automatic).

    --
    Socialism: a lie told by totalitarians and believed by fools.
  2. Re:Wha?!?!!! by Rei · · Score: 4, Interesting

    Just did... looks like my estimate of "a million lines" for Xorg was a bit off. It's "only" half a million lines of code (481739), plus 88k lines of comments and 87k blank lines, in 1476 files.

    --
    "We consider that six courts and an asylum claim are a rather odd way of returning to Sweden within a month."
  3. Re:Wha?!?!!! by metamatic · · Score: 3, Interesting

    Actually, OS X contains code and bugs that date back to the 1970s.

    --
    GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak