X.Org Hit By New Security Vulnerabilities - Two Date Back To 1988 With X11R2

[phoronix]

Phoronix: X.Org Hit By New Security Vulnerabilities - Two Date Back To 1988 With X11R2

It was a decade ago that a security researcher commented on X.Org Server security being even "worse than it looks" and that the GLX code for example was "80,000 lines of sheer terror" and hundreds of bugs being uncovered throughout the codebase. In 2023 new X.Org security vulnerabilities continue to be uncovered, two of which were made public today and date back to X11R2 code from the year 1988...

https://www.phoronix.com/news/XOrg-Vulnerabilities-Since-1988

[shinger]

*...Kuch..*...*..*kuch...*..long live the new King Wayland...*...kuch..*..kuch*..*kuch.

[HEL88]

Those working for Russia and China and others have more such 'bugs' posted.

That's the way it is, as the employees who create the code are not subject to counter-intelligence checks and controls as they are in normal large, companies.

[Volta]

That's the way it is, as the employees who create the code are not subject to counter-intelligence checks and controls as they are in normal large, companies.

You mean companies like micro$oft or apple who introduce spying crap on their own? Are you suggesting they're China or Russia sponsored? Or it's just usual trolling coming from you? Thankfully there's Open Source software that's ways more secure and verifiable than closed source spying mess. Your theory regarding 'normal large companies as being better' has nothing common with reality and to show your ugly trolls face eat this:

https://en.wikipedia.org/wiki/Project_Athena

'Normal large companies' are behind X11. Go back to the cave now.

[schmidtbag]

So, what exactly is the vulnerability? I guess in some cases it makes sense to not explain it when so many systems may remain exploitable.

[MadCatX]

Remember guys, Wayland is a bad design, too difficult to support, global shortcuts, screen sharing, middle-button paste, you know the drill

[Grinness]

Waiting for the nvidia blob fanboys to pour in to explain how it is better to live with security holes rather than the 'input lag' in wayland (non existent except, maybe, with their blob) ... popcorn bag ready .

[chuckula]

Of only X11 was open source then these bugs could have been found in days instead of decades.

[pracedru]

It is good that we are finally moving to another display tech.

[Grinness]

Of only X11 was open source then these bugs could have been found in days instead of decades.

... or simply replaced by a more secure solution because to big and to old to be fixed
(chomp chomp ... eating popcorn)