Stay Secure with the Latest Linux Advisories

security advisorymoderatecode execution

Ubuntu 14.10: USN-2536-1 Moderate: libXfont Code Execution Risk

libXfont could be made to crash or run programs as an administrator if it opened a specially crafted bdf font file.. =========================================================================Ubuntu Security Notice USN-2536-1 March 18, 2015 libxfont vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.10 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: libXfont could be made to crash or run programs as an administrator if it opened a specially crafted bdf font file. Software Description: - libxfont: X11 font rasterisation library Details: Ilja van Sprundel, Alan Coopersmith, and William Robinet discovered that libXfont incorrectly handled malformed bdf fonts. A local attacker could use this issue to cause libXfont to crash, or possibly execute arbitrary code in order to gain privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.10: libxfont1 1:1.4.99.901-1ubuntu0.1 Ubuntu 14.04 LTS: libxfont1 1:1.4.7-1ubuntu0.2 Ubuntu 12.04 LTS: libxfont1 1:1.4.4-1ubuntu0.3 Ubuntu 10.04 LTS: libxfont1 1:1.4.1-1ubuntu0.4 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2536-1 CVE-2015-1802, CVE-2015-1803, CVE-2015-1804 Package Information: https://launchpad.net/ubuntu/+source/libxfont/1:1.4.99.901-1ubuntu0.1 https://launchpad.net/ubuntu/+source/libxfont/1:1.4.7-1ubuntu0.2 https://launchpad.net/ubuntu/+source/libxfont/1:1.4.4-1ubuntu0.3 https://launchpad.net/ubuntu/+source/libxfont/1:1.4.1-1ubuntu0.4 . Enhance your Ubuntu installations to address libXfont security flaws that might result in system instability or illicit code execution..libxfont, ubuntu vulnerabilities, exploit fix, code execution. . Severity: Important. LinuxSecurity.com Team

Mar 18, 2015 •Important Ubuntu