Ubuntu USN-2500-1: X.Org X Server Info Leak and Crash Fix (CVE-2015-0255, CVE-2013-6424)

Key Information Vulnerability ID - USN-2500-1 Release Date - February 17, 2015 Summary - Multiple security issues in the X.Org X server have been fixed. Vulnerability Description - CVE-2015-0255 - The X.Org X server improperly handled XkbSetGeometry requests, leading to information disclosure. An attacker could exploit this issue via a local or remote connection to the X server and potentially obtain sensitive information. - CVE-2013-6424 - Affects only Ubuntu 12.04 LTS. The X.Org X server improperly handled certain trapezoids, allowing an attacker with a local or remote connection to the X server to potentially cause a server crash. Affected Packages - xorg-server - xorg-server-lts-trusty - xorg-server-lts-utopic Upgrade Instructions - A system restart is required after upgrading to apply all changes. Recommended Package Versions Reference Links - CVE-2015-0255 - CVE-2013-6424 Related Notices - USN-4772-1

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-2500-1: X.Org X Server Info Leak and Crash Fix (CVE-2015-0255, CVE-2013-6424)