USN-403-1: X.org vulnerabilities

Publication date

9 January 2007

Overview

X.org vulnerabilities


Details

The DBE and Render extensions in X.org were vulnerable to integer
overflows, which could lead to memory overwrites. An authenticated user
could make a specially crafted request and execute arbitrary code with
root privileges.

The DBE and Render extensions in X.org were vulnerable to integer
overflows, which could lead to memory overwrites. An authenticated user
could make a specially crafted request and execute arbitrary code with
root privileges.

Update instructions

After a standard system upgrade you need to reboot your computer to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
6.10 edgy xserver-xorg-core –  1:1.1.1-0ubuntu12.1
6.06 dapper xserver-xorg-core –  1:1.0.2-0ubuntu10.5
5.10 breezy xserver-xorg-core –  6.8.2-77.2

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.


Have additional questions?

Talk to a member of the team ›