On 01/11/2018 14:33, Cătălin George Feștilă wrote:

https://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html

Just sending a URL to the list is not very helpful - you need to explain what you expect us to do with it, or what the question is that would like answered.

That CVE is nearly a week old now so I'm sure the relevant people are already aware of it, if only because the security team would likely have opened a few dozen bugs about it by now if it was relevant.

It's not relevant though, because it doesn't affect Fedora as the X server is not setuid in Fedora and hasn't been for some considerable time (since F22 at least).

Tom

On Thu, 2018-11-01 at 16:33 +0200, Cătălin George Feștilă wrote:

https://www.securepatterns.com/2018/10/cve-2018-14665-xorg-x-server.html

Forgive me, it's been a stressful week.

https://bodhi.fedoraproject.org/updates/FEDORA-2018-839720583a https://bodhi.fedoraproject.org/updates/FEDORA-2018-4ab08fedd6

- ajax