USN-341-1: libxfont vulnerability

Publication date

7 September 2006

Overview

libxfont vulnerability


Details

An integer overflow has been discovered in X.org's font handling
library. By using a specially crafted font file, this could be
exploited to crash the X server or execute arbitrary code with root
privileges.

An integer overflow has been discovered in X.org's font handling
library. By using a specially crafted font file, this could be
exploited to crash the X server or execute arbitrary code with root
privileges.

Update instructions

After a standard system upgrade you need to reboot your computer to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
6.06 dapper libxfont1 –  1:1.0.0-0ubuntu3.1
5.10 breezy libxfont1 –  1:0.99.0+cvs.20050909-1.1
5.04 hoary libfs6 –  6.8.2-10.3
xserver-xorg –  6.8.2-10.3

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›