Ubuntu 14.10 USN-2436-1 Critical: X.Org X Server Code Issue

ubuntu

December 9, 2014

Several security issues were fixed in the X.Org X server.

Summary

Several security issues were fixed in the X.Org X server.

Software Description:

- xorg-server: X.Org X11 server

- xorg-server-lts-trusty: X.Org X11 server

Details:

Ilja van Sprundel discovered a multitude of security issues in the X.Org X

server. An attacker able to connect to an X server, either locally or

remotely, could use these issues to cause the X server to crash or execute

arbitrary code resulting in possible privilege escalation.

Topics Covered

security advisory critical code execution privilege escalation Ubuntu server crash X.Org

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.10:
  xserver-xorg-core               2:1.16.0-1ubuntu1.1

Ubuntu 14.04 LTS:
  xserver-xorg-core               2:1.15.1-0ubuntu2.4

Ubuntu 12.04 LTS:
  xserver-xorg-core               2:1.11.4-0ubuntu10.15
  xserver-xorg-core-lts-trusty    2:1.15.1-0ubuntu2~precise3

After a standard system update you need to reboot your computer to make
all the necessary changes.