3 ms·
Not that Wube Software handled this well, but you're better off not using GOG Galaxy for updates. It's had a 0-day privilege escalation vulnerability for over t
by jamesgeck0 5y ago
Not that Wube Software handled this well, but you're better off not using GOG Galaxy for updates. It's had a 0-day privilege escalation vulnerability for over two years. GOG tried to pull a fast one on the security researcher who reported it and has downplayed the severity of the issue. They've left their customers vulnerable for so long that their incompetence is effectively indistinguishable from malice.
https://wccftech.com/gog-has-had-a-severe-internal-vulnerability-problem-for-nearly-2-years/ https://wccftech.com/gog-has-had-a-severe-internal-vulnerabi...
- fossebooker 5y agoThanks for the info and yeah, this adds another brick to the GOG pile of shame unfortunately. GOG has been very lethargic to the point of straight-up dishonesty regarding their plan for Linux support for games, galaxy and their downloader. Their rollout of Galaxy has been panned and definition of what qualifies as DRM-free has been eroded over time. I understand the disparity of resources, but steam has done much more lately to embrace Linux and their community than GOG and gaping security holes is just unacceptable. A lot has changed since 2016.