buffer overflow in XFree
Dan Osterrath <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
For those of you using still xfs theres an possible buffer overflow in the XFree font libraries. http://www.securityfocus.com/archive/1/335592 The fix is to disable the SUID bit for XFree but I think this is realls bad as you can't access some devices and some files anymore which makes XFree slow. (Remember the discussion bout /tmp/.ICE-unix) So disabling xfs and using the internal font rendering engine might be a better fix. -- ---------------------------------------------------------------------- %> ln -s /dev/null /dev/brain %> ln -s /dev/urandom /dev/world %> dd if=/dev/world of=/dev/brain -- http://linuxfromscratch.org/mailman/listinfo/lfs-security Unsubscribe: See the above information page
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQA/VC349NbB8EM160MRAmkNAKClzSJLGg21+ppAByeZu34d3XSBdgCgmAQw i+Z/EsGnToaOaSRDKWRr6Fs= =Y0Fs -----END PGP SIGNATURE-----