Linux @lemmy.ml wizardbeard @lemmy.dbzer0.com 2 days ago

Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

www.phoronix.com Local Privilege Escalation Vulnerability Affecting X.Org Server For 18 Years

Crosspost of https://lemmy.sdf.org/post/24401210

Linux @lemmy.world mox @lemmy.sdf.org 2 days ago

www.phoronix.com /news/X.Org-CVE-2024-9632

18 comments

Yet another, "well, yeah, technically it has security ramifications, but I'm not admin'ing any multiuser machines, so I'm not losing any sleep over it" bug.
Rootless Xorg is still a niche thing?
That thumbnail lol
- Sysadmin job be like
- Perfect Christmas gift idea
- I've got a few old PCI cards around somewhere. I should pull one of them out and give them a try at this.
  
  If this metal thingy is anything like the one used as dust covers inside PC cases it'll just bend (I've actually tried to use one as a bottle opener).
What do you expect? X11 is in maintenance mode. Although I'll miss Polybar, I won't miss the protocol.
- I think it's still valuable to document these things so that the users who insist on sticking with X11 can receive a healthy dose of this (replace diapers with vulnerabilities) when the proverbial shit hits the fan and it becomes as hackable as Windows XP
- https://github.com/Alexays/Waybar/wiki/Examples
- Is it? Afaik it very much is not
  
  Well, freedesktop.org is now focused on Wayland (Xorg is not getting HDR, new synchronization protocols, or proper VRR (unless through XWayland), while Wayland is). RedHat RHEL marked Xorg as deprecated last year and will not even support it by next year (RHEL 10). KDE and GNOME also default to Wayland.
  
  It is. That's why Wayland is being pushed so hard, it's a codebase that's actually maintainable, with hopefully some more modern design and engineering principles.
Its good that people care enough to keep finding these vulnerabilities
- Yeah, This case especially since it includes XWayland
- If only for the sake of one's CV. Making your bones by having a couple of 0-days under your belt helps a lot of folks find jobs these days.
bruh

You've viewed 18 comments.