USN-1888-1: Mesa vulnerabilities
20 June 2013
mesa, mesa-lts-quantal vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 13.04
- Ubuntu 12.10
- Ubuntu 12.04 LTS
Summary
Mesa could be made to crash or run programs as your login if it received specially crafted input.
Software Description
- mesa - free implementation of the EGL API
- mesa-lts-quantal - free implementation of the EGL API
Details
It was discovered that Mesa incorrectly handled certain memory calculations. An attacker could use this flaw to cause an application to crash, or possibly execute arbitrary code. (CVE-2013-1872)
Ilja van Sprundel discovered that Mesa incorrectly handled certain memory calculations. An attacker could use this flaw to cause an application to crash, or possibly execute arbitrary code. (CVE-2013-1993)
Update instructions
The problem can be corrected by updating your system to the following package versions:
- Ubuntu 13.04
- libegl1-mesa - 9.1.3-0ubuntu0.3
- libgbm1 - 9.1.3-0ubuntu0.3
- libgl1-mesa-dri - 9.1.3-0ubuntu0.3
- libgl1-mesa-glx - 9.1.3-0ubuntu0.3
- libglapi-mesa - 9.1.3-0ubuntu0.3
- libgles1-mesa - 9.1.3-0ubuntu0.3
- libgles2-mesa - 9.1.3-0ubuntu0.3
- libopenvg1-mesa - 9.1.3-0ubuntu0.3
- libosmesa6 - 9.1.3-0ubuntu0.3
- libxatracker1 - 9.1.3-0ubuntu0.3
- Ubuntu 12.10
- libegl1-mesa - 9.0.3-0ubuntu0.2
- libgbm1 - 9.0.3-0ubuntu0.2
- libgl1-mesa-dri - 9.0.3-0ubuntu0.2
- libgl1-mesa-glx - 9.0.3-0ubuntu0.2
- libglapi-mesa - 9.0.3-0ubuntu0.2
- libgles1-mesa - 9.0.3-0ubuntu0.2
- libgles2-mesa - 9.0.3-0ubuntu0.2
- libopenvg1-mesa - 9.0.3-0ubuntu0.2
- libosmesa6 - 9.0.3-0ubuntu0.2
- libxatracker1 - 9.0.3-0ubuntu0.2
- Ubuntu 12.04 LTS
- libegl1-mesa - 8.0.4-0ubuntu0.6
- libegl1-mesa-lts-quantal - 9.0.3-0ubuntu0.1~precise3
- libgbm1 - 8.0.4-0ubuntu0.6
- libgbm1-lts-quantal - 9.0.3-0ubuntu0.1~precise3
- libgl1-mesa-dri - 8.0.4-0ubuntu0.6
- libgl1-mesa-dri-lts-quantal - 9.0.3-0ubuntu0.1~precise3
- libgl1-mesa-glx - 8.0.4-0ubuntu0.6
- libgl1-mesa-glx-lts-quantal - 9.0.3-0ubuntu0.1~precise3
- libgl1-mesa-swx11 - 8.0.4-0ubuntu0.6
- libglapi-mesa - 8.0.4-0ubuntu0.6
- libglapi-mesa-lts-quantal - 9.0.3-0ubuntu0.1~precise3
- libgles1-mesa - 8.0.4-0ubuntu0.6
- libgles1-mesa-lts-quantal - 9.0.3-0ubuntu0.1~precise3
- libgles2-mesa - 8.0.4-0ubuntu0.6
- libgles2-mesa-lts-quantal - 9.0.3-0ubuntu0.1~precise3
- libglu1-mesa - 8.0.4-0ubuntu0.6
- libopenvg1-mesa - 8.0.4-0ubuntu0.6
- libopenvg1-mesa-lts-quantal - 9.0.3-0ubuntu0.1~precise3
- libosmesa6 - 8.0.4-0ubuntu0.6
- libxatracker1 - 8.0.4-0ubuntu0.6
- libxatracker1-lts-quantal - 9.0.3-0ubuntu0.1~precise3
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
After a standard system update you need to restart your session to make all the necessary changes.