LWN.net Logo

A security update to XFree86

The XFree86 project has released XFree86 4.2.1, which fixes a few security problems. The most urgent problem is a vulnerability in the internationalization code which can allow an attacker to cause a privileged X client to load and execute arbitrary code. This vulnerability only exists in XFree86 4.2.0; earlier releases are not vulnerable.

No distributor updates have been received as of this writing, though Slackware has updated its XFree86 packages.


(Log in to post comments)

A security update to XFree86

Posted Sep 12, 2002 15:29 UTC (Thu) by pivot (guest, #588) [Link]

Mandrake 9.0rc2 comes with Xfree86 v4.2.1.

Copyright © 2002, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds