expo (was: Re: [CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0)

Daniel Stone daniel at freedesktop.org
Sat Apr 1 14:47:57 PST 2006


On Sun, Apr 02, 2006 at 01:07:53AM +0300, Daniel Stone wrote:
> As far as I can tell, the only
> difference is that www.x.org is now up to date, being the same as
> xorg.freedesktop.org once was.

Sorry, I lie.  www.x.org and the wiki are different sites.  www.x.org
carries notice of the CreatePixmap security advisory and the 6.9/7.0
release, but not of the geteuid vulnerability.  There's some kind of
authentication system at play, but no opportunity to register.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 191 bytes
Desc: Digital signature
URL: <http://lists.x.org/archives/xorg/attachments/20060402/1dfda393/attachment.pgp>


More information about the xorg mailing list