New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

XScreenSaver prompt states: "This version of XScreenSaver is very old! Please upgrade!" #3652

Open
andrewdavidwong opened this Issue Mar 4, 2018 · 3 comments

Comments

Projects
None yet
4 participants
@andrewdavidwong
Member

andrewdavidwong commented Mar 4, 2018

Qubes OS version:

R3.2

Affected component(s):

XScreenSaver in dom0


Steps to reproduce the behavior:

Lock the screen using XScreenSaver (the default screen locker) in dom0, then move the cursor or press any key.

Expected behavior:

The normal XScreenSaver prompt is displayed.

Actual behavior:

The XScreenSaver prompt states:

This version of XScreenSaver
is very old! Please upgrade!

General notes:

With all normally available updates applied, the version of XScreenSaver is 5.36.

  • Security: It is possible that there are security issues fixed in newer versions of XScreenSaver. By staying on an old version, Qubes 3.2 could be vulnerable to such issues.
  • UX: This is probably a byproduct of the fact that dom0 in Qubes 3.2 uses Fedora 23, which has reached EOL. Normally, this is not a security concern. Nonetheless, some users may be confused by the XScreenSaver message or suspect that the Qubes update mechanism is not functioning properly. In addition, the fact that this occurs on Qubes 3.2 but not on Linux distributions that use XScreenSaver (and in which it is updated normally) could be perceived as a shortcoming of Qubes 3.2.

Related issues:

#1917

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Mar 5, 2018

Member

Related discussion about similar problem in Debian stable: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819703
But it does not directly apply to us, because xscreensaver isn't one of few packages we backport fixes for.

Member

marmarek commented Mar 5, 2018

Related discussion about similar problem in Debian stable: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819703
But it does not directly apply to us, because xscreensaver isn't one of few packages we backport fixes for.

@unman

This comment has been minimized.

Show comment
Hide comment
@unman

unman Mar 6, 2018

Member

I dont believe there are any security issues fixed in newer versions, so it's simply a cosmetic issue.

Member

unman commented Mar 6, 2018

I dont believe there are any security issues fixed in newer versions, so it's simply a cosmetic issue.

@Polygonbugs

This comment has been minimized.

Show comment
Hide comment
@Polygonbugs

Polygonbugs Mar 8, 2018

I'm experiencing this also.

I'm experiencing this also.

@andrewdavidwong andrewdavidwong added the task label Apr 3, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment