Wednesday, June 5, 2013

[USN-1852-1] libdmx vulnerability

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQIcBAEBCgAGBQJRr4KYAAoJEGVp2FWnRL6TQeQQAJCEo/lWEN8xJ+XjOLXE7WT9
T4EASF0w/3AP+FUDysATexKFVpsjmfg++x7VrZ1tWKFxYJIPsFyvopagrwaw6ZMt
P5bewKUbn8jGFqhNen7I7H/e6m/458c35DrbiOFZWwNm/JGZ0/ACN7aaYyHWaCxG
OfYs5K4kfIR4m2J7qGoZ+oyjx687nzRH59NX6EBZQCkBR4BNQO+sDTukp9VjAklE
867wr+NH7cuPUwNkHTOaU5hPnX2/MON9+A9MXjAmgVIFf/XKX7lOWa2PabzaLxtW
ek15HXadNuqe9HAnFy2taiQR9bZI/lP4fayITBd5t1uLwk0aV/yow+k7cyObpD6U
wCnrypN0zBi2JVMGCTC5rKqMPOJ0WErEQdbGTP3mcTEQEtF2U4tFzUUnpt98QI5p
CDe0d3i1AHA2bZQnu29ElTOhrJH1d9uStZwoFX6D/hmJpxaM18xOFCCsQYggPvr0
xfn+zyhGSXjfU9ZJ/XXt0PpGlpf04GH/5VNhwyFf87lbhVykjIIWjSs/Ofs/HPTH
TCEqZAndikVGAYBVlKpca9KTXNht6SGZ5qdWYUDUQLFFAp+pPK62FYOh55rsYs6S
xPb/N5+wSfgxCq4GHMh6Z3Bc3mkWllL4FIFIBugxPxDI+obZPUrkbi7WdX7reHDN
OgWTEX4G8ONUmd0Pstii
=UUyI
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1852-1
June 05, 2013

libdmx vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 13.04
- Ubuntu 12.10
- Ubuntu 12.04 LTS

Summary:

Several security issues were fixed in libdmx.

Software Description:
- libdmx: X11 Distributed Multihead extension library

Details:

Ilja van Sprundel discovered multiple security issues in various X.org
libraries and components. An attacker could use these issues to cause
applications to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
libdmx1 1:1.1.2-1ubuntu0.13.04.1

Ubuntu 12.10:
libdmx1 1:1.1.2-1ubuntu0.12.10.1

Ubuntu 12.04 LTS:
libdmx1 1:1.1.1-1ubuntu0.1

After a standard system update you need to restart your session to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1852-1
CVE-2013-1992

Package Information:
https://launchpad.net/ubuntu/+source/libdmx/1:1.1.2-1ubuntu0.13.04.1
https://launchpad.net/ubuntu/+source/libdmx/1:1.1.2-1ubuntu0.12.10.1
https://launchpad.net/ubuntu/+source/libdmx/1:1.1.1-1ubuntu0.1

No comments:

Post a Comment