buffer overflow in XFree

Dan Osterrath <[email protected]>
Newsgroups gmane.linux.lfs.security
Message-ID <[email protected]>
For those of you using still xfs theres an possible buffer overflow in the 
XFree font libraries.

http://www.securityfocus.com/archive/1/335592

The fix is to disable the SUID bit for XFree but I think this is realls bad as 
you can't access some devices and some files anymore which makes XFree slow. 
(Remember the discussion bout /tmp/.ICE-unix) So disabling xfs and using the 
internal font rendering engine might be a better fix.

-- 
----------------------------------------------------------------------
%> ln -s /dev/null /dev/brain
%> ln -s /dev/urandom /dev/world
%> dd if=/dev/world of=/dev/brain

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
Unsubscribe: See the above information page
signature.asc (application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQA/VC349NbB8EM160MRAmkNAKClzSJLGg21+ppAByeZu34d3XSBdgCgmAQw
i+Z/EsGnToaOaSRDKWRr6Fs=
=Y0Fs
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.