Ubuntu 11.04 LTS: USN-1349-1 Critical: xorg Console Permissions Issue

ubuntu

January 26, 2012

X could be made to start by a user who lacked appropriate permissions.

Summary

X could be made to start by a user who lacked appropriate permissions.

Software Description:

- xorg: X.Org X Window System

Details:

It was discovered that the X wrapper incorrectly checked certain console

permissions when launched by unprivileged users. An attacker connected

remotely could use this flaw to start X, bypassing the console permissions

check.

Topics Covered

security advisory security issue remote access Ubuntu system update xorg console permissions

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  xserver-xorg                    1:7.6+7ubuntu7.1

Ubuntu 11.04:
  xserver-xorg                    1:7.6+4ubuntu3.2

Ubuntu 10.10:
  xserver-xorg                    1:7.5+6ubuntu3.1

Ubuntu 10.04 LTS:
  xserver-xorg                    1:7.5+5ubuntu1.1

In general, a standard system update will make all the necessary changes.