kerneltrap.org — A recent security advisory announced today by Rapid7 explains, "the NVIDIA Binary Graphics Driver for Linux is vulnerable to a buffer overflow that allows an attacker to run arbitrary code as root. This bug can be exploited both locally or remotely."
Oct 16, 2006 View in Crawl 4
lordbugOct 17, 2006
Read the Kernaltrap comment thread on that page. The latest (albeit beta) nVidia drivers, released 1 month ago, fix this exploit.
knodiOct 17, 2006
Its a feature not a bug.
archer1980Oct 17, 2006
@foolfromhellI totally agree eh, Wonder where all the linux fan boys that are always in the windows threads commenting about how secure linux is are right now. Just goes to show that no software is secure. Will this shut up the Linux fan boys, probably not.
ungamedplayerOct 17, 2006
Oh, a debate.. how delicious.With Open Source, I can -look- at the source code and fix bugs. That's right. I can fix them. I wont deny that most users of open source probably can not, but If I need to, I can.With closed source software, like NVidia here, one can -not- see the source code and you are at the mercy of $vendor to fix your software problem*. Don't call me a zealot, because I'm right.Don't say Open Source is buggy, all software is made by humans, therefore imperfect.With Open Source, I can fix bugs (yes, I code, no I don't care if you care) and quite often do. Use what you want. I'll be the one over here being productive on my Linux system, you can go run a virus scanner, remove your spyware and update your drivers.Digg your own grave punks.* yes Some people have mad asm skills its quite possible, but I can't imagine anyone actually doing this for any significantly complicated project without financial backing.
cablitoOct 17, 2006
Sorry for saying it. Linux will be always object of perfection, no matter how many crap code gets written for it by us stupid windows programmers, it will all be roses.
nonsequitorOct 17, 2006
Horray for XGL!!! I upgraded to the Beta Driver earlier this month to run XGL with the native on card support. And yes, XGL is awesome.