| X marks the Linux security hole |
|---|
The X.Org Foundation and several Linux vendors have released updates for the X Window System technology on which most Linux graphical front-ends are based, fixing serious security flaws in a graphics-manipulation component.
A number of bugs in libXpm, a library used for manipulating pixmaps, could allow an attacker to execute malicious code on a Linux system, X.Org said in an advisory last week. The bugs, including integer overflows, out-of-bounds memory accesses, insecure path traversal and an endless loop, could be exploited by tricking a user into viewing a specially crafted pixmap file with one of the many applications that rely on libXpm, X.Org said.
|