[Dorset] Rogue browser overwriting my desktop

2014-09-25 Thread Victor Churchill
I'm on a Dell Vostro laptop with an attached 21" monitor. Running XFCE on Ubuntu 12.04: [1064]victor@victor-Vostro-3550:/nfs/temp/ebookgen/clover$ uname -a Linux victor-Vostro-3550 3.2.0-43-generic #68-Ubuntu SMP Wed May 15 03:33:33 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux [1065]victor@victor-Vostro

Re: [Dorset] Rogue browser overwriting my desktop

2014-09-25 Thread Ralph Corderoy
Hi Victor, > A popup is generated, but when it goes away the underlying window > content is not restored - or rather, something is restored to the > temporarily overwritten area but it seems to be being written to the X > desktop itself. Is there compositing being used, perhaps just for the popup

Re: [Dorset] Rogue browser overwriting my desktop

2014-09-25 Thread Victor Churchill
On 25 September 2014 12:28, Ralph Corderoy wrote: > > Is there compositing being used, perhaps just for the popups? When did > this start going wrong? > To be honest I don't know whether compositing is being used I'd imagine not, as this is running a fairly low level environment. It just starte

[Dorset] BASH security vulnerability

2014-09-25 Thread Paul Stenning
Hi all, Please be aware of a serious security vulnerability that has been discovered in BASH. I received notification of this from a web hosting company I use regarding CentOS but it applies to all Linux distros. Please update ASAP, especially web servers etc. Below is the message they se

Re: [Dorset] Rogue browser overwriting my desktop

2014-09-25 Thread John Carlyle-Clarke
I saw some really bad features like this a while ago in Chrome, but I waited a while and it got better again. I'm running Arch, so due to rolling updates you can often just "wait out" bugs and they go away again! I think it's to do with new GPU accelerated rendering tricks, which can expose buggy

Re: [Dorset] BASH security vulnerability

2014-09-25 Thread Martin Hepworth
Centos/RH fix not 100% complete and you'll have to do this again. also check if your web servers are running cgi scripts as bash scripts this is a bigger problem in general as it's prone to alsorts of abuse -- Martin Hepworth, CISSP Oxford, UK On 25 September 2014 13:30, Paul Stenning wro

Re: [Dorset] BASH security vulnerability

2014-09-25 Thread Terry Coles
On Thursday 25 Sep 2014 16:38:03 Martin Hepworth wrote: > Centos/RH fix not 100% complete and you'll have to do this again. > > also check if your web servers are running cgi scripts as bash scripts > this is a bigger problem in general as it's prone to alsorts of abuse The real problem with

Re: [Dorset] BASH security vulnerability

2014-09-25 Thread Ralph Corderoy
Hi Terry, > There must be millions of similar devices out there, eg TVs, routers, > network storage, fridges even. Whose going to sort them out? The machine has to be running bash; lots of smaller devices run a lighter shell, e.g. dash, or Busybox. And to be vulnerable, there has to be a means

Re: [Dorset] BASH security vulnerability

2014-09-25 Thread Terry Coles
On Thursday 25 Sep 2014 16:58:31 Ralph Corderoy wrote: > > There must be millions of similar devices out there, eg TVs, routers, > > network storage, fridges even. Whose going to sort them out? > > The machine has to be running bash; lots of smaller devices run a > lighter shell, e.g. dash, or B