Files
xserver_xsdl/hw/xfree86
Matthieu Herrb 8a59e3b7db Disable -logfile and -modulepath when running with elevated privileges
Could cause privilege elevation and/or arbitrary files overwrite, when
the X server is running with elevated privileges (ie when Xorg is
installed with the setuid bit set and started by a non-root user).

CVE-2018-14665

Issue reported by Narendra Shinde and Red Hat.

Signed-off-by: Matthieu Herrb <matthieu@herrb.eu>
Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
Reviewed-by: Adam Jackson <ajax@redhat.com>
(cherry picked from commit 50c0cf885a6e91c0ea71fb49fa8f1b7c86fe330e)
2018-10-25 09:18:06 -04:00
..
2017-10-10 23:33:44 +02:00
2018-03-27 10:28:33 -04:00
2018-10-16 10:22:05 -04:00
2017-10-30 13:45:20 -04:00
2018-04-05 14:18:16 -04:00
2017-04-27 15:19:45 -04:00
2017-04-27 15:19:41 -04:00
2015-01-05 09:53:58 +10:00