3 ms·
Wayland fixed one problem, but there's no shortage of local privilege escalation bugs with which the calculator can still read the sudo password.
by yyyk 5y ago
Wayland fixed one problem, but there's no shortage of local privilege escalation bugs with which the calculator can still read the sudo password.
- vaylian 5y agoI want to learn more. Do you have some examples?
- yyyk 5y agoJust yesterday, Microsoft found a few[0]. There's no shortage of these, but more important is the haphazard way fixes are backported to longterm (e.g. [1]). This reached the point that Google's security advice is 'always follow the latest kernel'[2], except most users and distros simply cannot afford it, so they are stuck with a vulnerable system. Linux is not unique here. In the longterm, all the typical desktop OSs will need significant structural changes far beyond 'chase vulnerabilities and patch everything all the time'. [0] https://www.theregister.com/2022/04/27/microsoft-linux-vulnerability/ https://www.theregister.com/2022/04/27/microsoft-linux-vulne... [1] https://nvd.nist.gov/vuln/detail/CVE-2019-15902 https://nvd.nist.gov/vuln/detail/CVE-2019-15902 [2] https://security.googleblog.com/2021/08/linux-kernel-security-done-right.html https://security.googleblog.com/2021/08/linux-kernel-securit...