Red Hat Bugzilla – Bug 293031
nx uses vulnerable XFree86 code
Last modified: 2008-03-06 11:34:25 EST
Description of problem: I bring this to your attention: http://bugs.gentoo.org/show_bug.cgi?id=192712 Seems like the worst thing the "attacker" would be able to do is to run code as himself. But just to be sure (I'm not the right person to decide about that), please give it a short look. Thanks!
http://lwn.net/Articles/253872/
Axel, I'll start work on the upgrade to 3.x if you don't object.
Sorry for the delay, but I'm having trouble getting 3.x packaged. Some of the tarballs have changed, I'm not familiar with the build process for this package, and I've not had the time of late to get in depth on it. Axel, have you been able to look at this?
Ping on this. Is any of the package maintainers willing to address the problem?
I'd love to, but I really need Axel's help with this, as he's much more familiar with the somewhat odd build process for nx.
nx-3.1.0-25.1.fc8 has been submitted as an update for Fedora 8
nx-3.1.0-25.1.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report.