I happened upon this security issue while doing some plumbing in the world of STK and though it is not a potentially serious issue, I wondered if this was a place that everyone should pay more attention as end users. I would like to have some utilities like GLXgears that give me a number to say that my security has not regressed. Link to an 8.04 bug report on passwd .
I am not aware of a standard security check that would have identified the SSL flaw or this apparent weakness. It would seem that in the same way I check the FPS in my video to see if graphics have regressed in speed, I would do an automatic check of security at intervals also.
I don't specialize in any aspect of open source but I do understand OpenGL and Xorg and Mesa3D fairly well.
No comments:
Post a Comment