Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 14.04 & 12.04 LTS: USN-2918-1 Critical: Pixman Integer Underflow

ubuntu
Calendar Grey March 3, 2016
Scroller Ubuntu
Recent reports highlight the pixman vulnerability in Ubuntu 14.04 and 12.04 LTS. To improve your security, routinely update packages and check for patches.
pixman could be made to crash or run programs as your login if it processed specially crafted data.

Summary

pixman could be made to crash or run programs as your login if it processed

specially crafted data.

Software Description:

- pixman: pixel-manipulation library for X and cairo

Details:

Vincent LE GARREC discovered an integer underflow in pixman. If a user were

tricked into opening a specially crafted file, a remote attacker could

cause pixman to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics%20covered

Topics Covered

security advisory update critical DoS Ubuntu integer underflow pixman

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  libpixman-1-0                   0.30.2-2ubuntu1.1

Ubuntu 12.04 LTS:
  libpixman-1-0                   0.30.2-1ubuntu0.0.0.0.3

After a standard system update you need to restart your session to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2918-1

CVE-2014-9766

Severity
critical
Lowest
Low
Medium
High
Critical

March 03, 2016

Topics%20covered

Topics Covered

security advisory update critical DoS Ubuntu integer underflow pixman

Package Information

https://launchpad.net/ubuntu/+source/pixman/0.30.2-2ubuntu1.1
https://launchpad.net/ubuntu/+source/pixman/0.30.2-1ubuntu0.0.0.0.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.