USN-616-1: X.org vulnerabilities

Packages

xorg-server -

Details

Multiple flaws were found in the RENDER, RECORD, and Security
extensions of X.org which did not correctly validate function arguments.
An authenticated attacker could send specially crafted requests and gain
root privileges or crash X. (CVE-2008-1377, CVE-2008-2360, CVE-2008-2361,
CVE-2008-2362)

It was discovered that the MIT-SHM extension of X.org did not correctly
validate the location of memory during an image copy. An authenticated
attacker could exploit this to read arbitrary memory locations within X,
exposing sensitive information. (CVE-2008-1379)

Multiple flaws were found in the RENDER, RECORD, and Security
extensions of X.org which did not correctly validate function arguments.
An authenticated attacker could send specially crafted requests and gain
root privileges or crash X. (CVE-2008-1377, CVE-2008-2360, CVE-2008-2361,
CVE-2008-2362)

It was discovered that the MIT-SHM extension of X.org did not correctly
validate the location of memory during an image copy. An authenticated
attacker could exploit this to read arbitrary memory locations within X,
exposing sensitive information. (CVE-2008-1379)

Update instructions

After a standard system upgrade you need to restart your session to effect the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
8.04 hardy	xserver-xorg-core – 2:1.4.1~git20080131-1ubuntu9.2
7.10 gutsy	xserver-xorg-core – 2:1.3.0.0.dfsg-12ubuntu8.4
7.04 feisty	xserver-xorg-core – 2:1.2.0-3ubuntu8.4
6.06 dapper	xserver-xorg-core – 1:1.0.2-0ubuntu10.13

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References