==========================================================Ubuntu Security Notice USN-939-1               May 18, 2010
xorg-server vulnerabilities
CVE-2009-1573, CVE-2010-1166
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.04 LTS:
  xserver-xorg-core               2:1.4.1~git20080131-1ubuntu9.3
  xvfb                            2:1.4.1~git20080131-1ubuntu9.3

Ubuntu 9.04:
  xserver-xorg-core               2:1.6.0-0ubuntu14.2
  xvfb                            2:1.6.0-0ubuntu14.2

Ubuntu 9.10:
  xserver-xorg-core               2:1.6.4-2ubuntu4.3

After a standard system update you need to restart your session to make
all the necessary changes.

Details follow:

Loïc Minier discovered that xvfb-run did not correctly keep the
X.org session cookie private.  A local attacker could gain access
to any local sessions started by xvfb-run. Ubuntu 9.10 was not
affected. (CVE-2009-1573)

It was discovered that the X.org server did not correctly handle
certain calculations.  A remote attacker could exploit this to
crash the X.org session or possibly run arbitrary code with root
privileges. (CVE-2010-1166)


Updated packages for Ubuntu 8.04 LTS:

  Source archives:

          Size/MD5:   734709 a8c74577a700f9f8040665f46c23e6d8
          Size/MD5:     2602 7718d9ad31ee3b8b5be752f742d3e3d1
          Size/MD5:  8351532 37e6ba2cfa89e0018b35e0d0746ee00f

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  1884058 654ebf3f7eccc027389f45584b9d6e5c
          Size/MD5:  2041248 a40aa9395c1cba47191a378766665a4f
          Size/MD5: 13005506 afb591260e8ca2e56c7dfb91279b71eb
          Size/MD5:  4424128 d526f656d3f04b55ad1ab54250d550b1
          Size/MD5:   695144 b3f461bca57e8a9151ea229d092635ee
          Size/MD5:  1997448 f21104c631089ea56d0998e7fad7f584

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  1771800 9ddc215f29ddcaa231e606e9b6c7a66b
          Size/MD5:  1921396 1731b1cc355611a81331e11df3678936
          Size/MD5: 12666256 ef0bde87e20dd2f26069afe5de06b035
          Size/MD5:  4097872 e107062bfc89f0f3e37cc9780aeb2a56
          Size/MD5:   705218 1860b3138480bb46780c2286e4afc1bd
          Size/MD5:  1883870 cf956c52cdd02230ae8744ec3b361c3a

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  1751398 fa6e480b0442fd18847243671bd91af5
          Size/MD5:  1900694 313cea193b79a01c2b9592256575c590
          Size/MD5: 12689680 c13d0579462e5b5670ce844f431e495a
          Size/MD5:  4062862 0c093940678bbbad41bdbcb18ab3d011
          Size/MD5:   695136 db246451517711afe8b7f771c29db5f8
          Size/MD5:  1863406 cda78b5ae08ebfbbebfddeb743c29f00

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  1851038 874ca0d405ac9132c4c300fd580c2d5b
          Size/MD5:  2001730 91455b231910049fd5fcf6ca8d33a850
          Size/MD5: 13274040 9368fc62c7f0cc50e48cb9674560f17a
          Size/MD5:  4516374 f0127ac6feb505cb40a05611831d4cbc
          Size/MD5:   695168 3971b6932f08e2daa66ec1454a5aea1a
          Size/MD5:  1962906 1a2018a2149bb89ddc69dbe047ab2d25

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  1771286 22fba626b71d09e44214dd449866011f
          Size/MD5:  1913674 3b35db9506426ebfb71414e056e22473
          Size/MD5: 12637974 4ac05220c08d1f4e54d5be1deda91822
          Size/MD5:  4166220 dcf95738f59cd93daf1f6ddb4b14ad94
          Size/MD5:   695508 c862e70557e5c2fdb8263b70b33184f2
          Size/MD5:  1877366 5a4711a34425170d91990f4d509a36b7

Updated packages for Ubuntu 9.04:

  Source archives:

          Size/MD5:   115208 69e04a09b467bb3d3cd9e314ba26993b
          Size/MD5:     3152 0b861bd6318e201022295571b849b6b7
          Size/MD5:  6265827 83f9610a5902c6582777fc5265cfff54

  Architecture independent packages:

          Size/MD5:    69822 760f1e8ad68c983e5bce6a77469218f0

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  1463746 c5c87ee3207a717af4402ac29dfc2e34
          Size/MD5:  6496594 cc74270f9b08a1fdb0a6e8c92f2fa73f
          Size/MD5:  2320642 94992370c5cfb6e751ec6503483ca2ad
          Size/MD5:   992248 a536a41e647c354f5627888082b9645b
          Size/MD5:  1574640 f06f179f2829d8ac07b6a765da49d461
          Size/MD5:   824416 29ae211f2bdb462b2f99e0dd10b3bba2
          Size/MD5:  1553310 f569a2555a6bae4f12aa0b50412c092b
          Size/MD5:  1663240 e27bc29894d5c1bad787486b1b5185ba
          Size/MD5:  1606374 dce7a64ff4ac30f9736a1926eb277516

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  1402014 fd05a910f5e81e8ba1411ef4c14ede5f
          Size/MD5:  6271534 0d6f56ed1933b615fcb9127ccd3b0ad3
          Size/MD5:  2178506 dc2b51882390ff74a7f7b2c02a4e0527
          Size/MD5:   992248 4b2d27f92e32a52b297f585b73ff5b2b
          Size/MD5:  1511502 3c49c255d06dea46d5cb56370a924367
          Size/MD5:   810690 b2c6ee29bcb261c0f934c14706849fd0
          Size/MD5:  1493936 1b8f72305ef14bed8496f82460589d8f
          Size/MD5:  1588124 25c8a5c62454000441ae24f53f230ce9
          Size/MD5:  1536610 589406ea77e55d31a1df039ab2dec540

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  1389084 1b9aa6dc848ba6b26d1ea270b2cdeea2
          Size/MD5:  6310796 d2a34fde6ea32cf85da324a3110dd6a2
          Size/MD5:  2165378 ff99fb03803a8255ec960299684a1ca1
          Size/MD5:   992264 ac2081ce2c24524b03b21b0a30f1dc3e
          Size/MD5:  1500002 e6baf7cacce646892164c1bf9773a520
          Size/MD5:   810284 e7895f6267af2f48c1098a6af066bca4
          Size/MD5:  1490582 48c15275c1663cd3e78074a6e93d9dbc
          Size/MD5:  1575448 ee3af0e234cb4844d5f9d56023608e0b
          Size/MD5:  1524950 a2e3fbf8e303a5f5b52b2d2654d50aa3

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  1448218 c339df83e6c3133cec29a7b8783625a9
          Size/MD5:  6550196 8f83d30765afac5420def5b3f2e7d46f
          Size/MD5:  2317058 630f25d9a243ad431159d72fe16cdfd8
          Size/MD5:   992328 b10a7dea06937c32a700b8c657d209cd
          Size/MD5:  1557894 37bae02c2d03a1d53aa5233f818928b3
          Size/MD5:   833308 7f8aa2931159dcae6f91ed200a13d673
          Size/MD5:  1540960 6e4bb7b459e4514ec8d8fcc2d06fe598
          Size/MD5:  1639676 3b8652e744fe05109c424a08ac220472
          Size/MD5:  1585520 f96d81e595a55d8b21f2a7b26b19f48d

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  1385718 93e50f53e2d470da13d3f154e10f50cc
          Size/MD5:  6197352 5a818034d5c75657626cdecf5c2c6180
          Size/MD5:  2153064 196cef1384cc76ec6690aa8c3529ca3b
          Size/MD5:   992616 5bca05fb62299a9d5ce2a3519f95f10d
          Size/MD5:  1488264 df00bbc202218d0299908d42aa63cf20
          Size/MD5:   813120 814cf2749e28fae6d33ba95ee40ffe21
          Size/MD5:  1469358 a5842815a7722bf24df9fae551efc4db
          Size/MD5:  1564228 758fb70b5fd52e64448685c3305449f1
          Size/MD5:  1511720 a69b024848b6bab7c36f364a21838f56

Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:   128245 ce0c5053213718efaba6a8a9fd624b94
          Size/MD5:     3109 ca00d7721282ae3c67478c44cd53adb9
          Size/MD5:  6173072 b03a1c9712eb316c9d6811f944f0743a

  Architecture independent packages:

          Size/MD5:    75092 d20abc1f90ae9ba2b77c789184263f23

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:  1491672 4ce86e408667e08e508abcc6608a1fe3
          Size/MD5:  1696044 aa915244716aaae6e39d45f284aedcc2
          Size/MD5:  6470518 b7526a1aa804ca9a356da71d4e3e4a23
          Size/MD5:  2357472 60614301ce678fd26b50292912fc2d1a
          Size/MD5:  1016384 1bfd58a051c775c71752efab6e509cf6
          Size/MD5:  1605856 4297f4f094533fdb21ad83424b4913be
          Size/MD5:   848588 dda88501fd512d3eb16ad1b84b863e00
          Size/MD5:  1585798 da2019dc152733812e9bdfb66c35bedf
          Size/MD5:  1635974 02985a60c09aed16e1d3e183efe8d82b

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:  1437204 7560ba166336198927a199129b863ae9
          Size/MD5:  1627448 1b04db4974223f9f9b379ddd55df5c90
          Size/MD5:  6384770 3aba1f7ed77d671db7151d4def75d8ee
          Size/MD5:  2215062 27c1696d1ccac16361b9609cb1d1d253
          Size/MD5:  1016450 c87842ddb517db93079acf296ff0bec5
          Size/MD5:  1549934 27c40ee55f4110d33dd17108c80e9e38
          Size/MD5:   835350 caef6f7b0197520a3d86212c84aae2f0
          Size/MD5:  1530154 c44245cf43278a8b7f57ecf77ea4e064
          Size/MD5:  1574330 60a2381b76381d2d4b0014903df26a6d

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:  1425262 a22d3779cc171d6986d87cc3e9bd3f62
          Size/MD5:  1616822 93cc7a028d03d70a8a4a6fb586026213
          Size/MD5:  6418688 2911be3efc13823844e1086982a5ec20
          Size/MD5:  2200082 a1829ee4acf991b8634b0e67371d625a
          Size/MD5:  1016394 6b312ad58c62e7a45506c630fcc5290b
          Size/MD5:  1538676 1b69bc0851769f2db8c17c8889f90bce
          Size/MD5:   835220 0ca9bc627fd51714c11d225f13b0b496
          Size/MD5:  1529200 fd5fd3cbbc273703094f51ecc0bee21b
          Size/MD5:  1563328 4923ae3d290f0569cc33c672ab976280

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:  1465160 ae78bdf3bd865c3d9e7d7bee28e7eab9
          Size/MD5:  1662854 0892e3850a6e7c9882c106c15f9c913f
          Size/MD5:  6638026 c03bf07b725c73cf03712095c38ad928
          Size/MD5:  2295024 7b7b20dcc14b7e974eb3561941d88400
          Size/MD5:  1016502 09646a033fa77960f44eadc8e51a9148
          Size/MD5:  1580340 3ee007d1ea567229a12eb502266f9982
          Size/MD5:   844678 cb1865184ae02f17a5c3e4bfd777ee8f
          Size/MD5:  1567674 8804c4961eb15a96ee4f4338df6ebd5b
          Size/MD5:  1607274 c5600153044004d0cbd402a4c1d4f81a

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:  1408310 f189ad0f858484365550978cc2c86a9a
          Size/MD5:  1591620 5b9ca55b813f198b56af7219b4b6da58
          Size/MD5:  6323176 38ffd676c894c39994a6925fd794006f
          Size/MD5:  2182776 c813ff168ce7d661c2623c86307f52f9
          Size/MD5:  1016798 44c81fbc50eafac03c7114f2db5f033c
          Size/MD5:  1516712 1bb12e448345de2296f8e4ab2f85db28
          Size/MD5:   837762 9008801ac28bfa55bafc4ff077ed1de5
          Size/MD5:  1500734 a23879d63c4a922e00b88c9e7154a6e6
          Size/MD5:  1540062 9f4ba329373dea57f9fb77b9a5b86f4e