=========================================================== 
Ubuntu Security Notice USN-571-1           January 18, 2008
libxfont, xorg-server vulnerabilities
CVE-2007-5760, CVE-2007-5958, CVE-2007-6427, CVE-2007-6428,
CVE-2007-6429, CVE-2008-0006
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 6.10
Ubuntu 7.04
Ubuntu 7.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libxfont1                       1:1.0.0-0ubuntu3.4
  xserver-xorg-core               1:1.0.2-0ubuntu10.8

Ubuntu 6.10:
  libxfont1                       1:1.2.0-0ubuntu3.2
  xserver-xorg-core               1:1.1.1-0ubuntu12.3

Ubuntu 7.04:
  libxfont1                       1:1.2.7-1ubuntu1.1
  xserver-xorg-core               2:1.2.0-3ubuntu8.1

Ubuntu 7.10:
  libxfont1                       1:1.3.0-0ubuntu1.1
  xserver-xorg-core               2:1.3.0.0.dfsg-12ubuntu8.1

After a standard system upgrade you need to restart your session to effect
the necessary changes.

Details follow:

Multiple overflows were discovered in the XFree86-Misc, XInput-Misc,
TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate
function arguments.  An authenticated attacker could send specially
crafted requests and gain root privileges. (CVE-2007-5760, CVE-2007-6427,
CVE-2007-6428, CVE-2007-6429)

It was discovered that the X.org server did not use user privileges when
attempting to open security policy files.  Local attackers could exploit
this to probe for files in directories they would not normally be able
to access.  (CVE-2007-5958)

It was discovered that the PCF font handling code did not correctly
validate the size of fonts.  An authenticated attacker could load a
specially crafted font and gain additional privileges.  (CVE-2008-0006)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

          Size/MD5:     7579 b82e0fa7d757d826e707f69c3e5edd49
          Size/MD5:      743 069d925c7b2e1cccc2acf62253631557
          Size/MD5:   816966 29c00c678d4ac9bea8ffe7ba264825d0
          Size/MD5:    36498 a2a8e2d8780311718768c507f48ae7ef
          Size/MD5:     1804 e481267061428d62fc0243aa92afc427
          Size/MD5:  7966941 f44f0f07136791ed7a4028bd0dd5eae3

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   302946 93f15f5593f006615d1b7cfce54a8644
          Size/MD5:   375960 ae10a68f07b404a08aa8dad62cc353f2
          Size/MD5:   243030 c51a4fb15eaa34e3b21a4e7fec057dae
          Size/MD5:  1415060 93f5c5e74fbe957c01b772371207b026
          Size/MD5:  4049242 6bc838af02a5c05516ed85dd732a49fc
          Size/MD5:   295068 5328d75aa004146b39a875a039c30e83
          Size/MD5:  1565602 9ed46c56a87d5ed4f494ad4641006a6d
          Size/MD5:    50362 66162aa5a1f0b29ad75996b91629042a
          Size/MD5:   849334 a6a82bc6cd6629503b5312370f01ed7b

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   279196 42cf2bfc998a0f78c00e99040d487d62
          Size/MD5:   320930 bba806efbd06d8a15ad1489e9aacda3e
          Size/MD5:   216836 fa901a663ff5edcec15b88c56cc70546
          Size/MD5:  1242556 2c34036ccb51e55a00c70c6966f04a4b
          Size/MD5:  3532528 1fb1915800a662f6685893720ba44a19
          Size/MD5:   295052 4e3f366e19367a10f2eb4a11e1b6c067
          Size/MD5:  1383576 ab8d55fb670aa4f4769138b109db1818
          Size/MD5:    42896 9d1162a7dcedbfb1fe28a1bfccb93f9e
          Size/MD5:   749484 de72dfb42d3b30a0283b08b1575a055e

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   291122 a063a99eb27af557640f36315cd4bd9b
          Size/MD5:   370060 4bfb5286c916d25830e00bd08057e909
          Size/MD5:   235446 5675323cf1e7a28ede755ac14b9ebc7e
          Size/MD5:  1369134 0d6fe7e4ceda966ce7fbe7d101eb7db1
          Size/MD5:  4076092 c932b987cb2a8a26f9352abde3310184
          Size/MD5:   295078 51e8fd2adba042afff7624a98e9dcb52
          Size/MD5:  1507420 5089f56b048628844130439b776c993d
          Size/MD5:    55580 2b77d9071cda85d55106e8634be9c5d4
          Size/MD5:   825872 69fed7811eaca0f640ebbe54b35ec6f3

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   298024 2406bf997e6655ebef9246766fa8f06f
          Size/MD5:   321432 93cc9aeee607c0ff05aa8f8f38428e06
          Size/MD5:   230086 6930bde44a5e67af2a940b8a7ca55456
          Size/MD5:  1314332 72b2111db94c18c436e09a3a21e1c6db
          Size/MD5:  3789988 cd05f05097f10a4fbc699c5b2ec5dd12
          Size/MD5:   295426 cf419870b2d4d95c410bc6bcdba43611
          Size/MD5:  1446486 d480ccd6781ef8b31d32b0b8cd8a1da0
          Size/MD5:    44316 1893ccdc138daef8bbc0586904ab6b63
          Size/MD5:   759188 73da441a7a34dcf698b7ebdab3933dae

Updated packages for Ubuntu 6.10:

  Source archives:

          Size/MD5:    21620 8da1c473a761cd2802c2a354f6fc3d7b
          Size/MD5:      923 b6b33f8a32d1421c78b189bd4e663cdb
          Size/MD5:   827186 b4cb7808df5804efeb457043fed13782
          Size/MD5:    96459 c7c63908197f516316fa3fce1c806abf
          Size/MD5:     2020 17f02c68f33944d97afa18726e6a1786
          Size/MD5:  8388609 15852049050e49f380f953d8715500b9

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   305320 451fe5b33af0116cc910b54f5eca0bec
          Size/MD5:   354770 8a8a294937af1ecc00ed7326a2b031e6
          Size/MD5:   243222 3fc4be125b2631a72f1520c87dc63a37
          Size/MD5:  1427460 ea3ef278956c9b497bef1b646e2aa623
          Size/MD5:  3918384 731b26605473e0387bc1b33f6af6ff98
          Size/MD5:   297840 c29b1aae776d101eefee89cb40a76bd3
          Size/MD5:  1579878 84cc344e7669807cb7d85eee1e1b1c84
          Size/MD5:    57808 3e8bdeec29d1457de42951c527c6875e
          Size/MD5:   814028 3d8af84c5b6ff294a12fdf600a97da9b
          Size/MD5:  1608702 c2ecf330fd7102064042272459a1ae20

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   292120 cdac07c3dfb271a85ddc246597678538
          Size/MD5:   337174 f70bfe8e2107873686dd3a76bf893e4d
          Size/MD5:   226190 4115fc909360084bab5c0d4af379eb84
          Size/MD5:  1327954 fc16b76475ab555861ccebf0eed679b9
          Size/MD5:  3563318 73135de806545cc1cf8c3531c68fa643
          Size/MD5:   297872 53ea6b2c53bc0e3f6575466bdb5fcab3
          Size/MD5:  1475698 f79c8e3c3f4e39505e28ed550715a191
          Size/MD5:    51040 a0266b897a8f805745d683b2a278011c
          Size/MD5:   752020 8728215d0dc46f3f215257ed13d35735
          Size/MD5:  1499296 df3810b38f04919216a9d2cfa61a2663

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   296106 5f72e842a596d04f999a7b9ac0b76a94
          Size/MD5:   353872 191a13fb4cb53a9e67b4c91e171cf855
          Size/MD5:   237430 b9c53fb870881a0d322d05db751d3f11
          Size/MD5:  1402526 f4438ba6d98ed1f954edb066249b413f
          Size/MD5:  3984244 a594d5763c870cee759590fba5f6b2da
          Size/MD5:   297882 fdab76379bca79b78c4cbd75d7c6911e
          Size/MD5:  1541918 73960f35530d773448f3d994b0dae66b
          Size/MD5:    63824 667c10ad760ed2a612a908892473c0ee
          Size/MD5:   798252 5f7501d615bc37d317f48994e09afeb5
          Size/MD5:  1566650 8f8b09efcc31d8b6684a5efa3426253c

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   304734 f7c432bcf222e16d37e0bc970b1c6f35
          Size/MD5:   321620 3aa261b88703a2c90455d501e2cba593
          Size/MD5:   234306 392c126e9f8e3b864469f828b14bd557
          Size/MD5:  1344980 174d3acfe41a476f384c46fc57feb7fc
          Size/MD5:  3696994 cb1cea1779a8b4d7b5b07ed81e888a95
          Size/MD5:   298240 c7ea473e1f008b52872cd7aef89a803b
          Size/MD5:  1478500 63f5f3b0bb74e28358cdf2e04586797a
          Size/MD5:    50716 39448cd0d689ed92b3dbbf52c64ebc15
          Size/MD5:   734456 493e3bc13ca0c6e61df9a457b62a3e66
          Size/MD5:  1500858 2b218054e006d11087d82d18af0ca277

Updated packages for Ubuntu 7.04:

  Source archives:

          Size/MD5:   112282 2a4a046bfdc29acf2a351f31803a0668
          Size/MD5:     1062 f77f286c0cc394fc334fdb4b7975cbe4
          Size/MD5:   776980 55a536881d38dc3c48299db9ed811d59
          Size/MD5:   461277 3c8ab8f9525d66db96e4fc231af7bbb3
          Size/MD5:     2117 1bd2f428138b533133f194e227c72f72
          Size/MD5:  8106829 8cc04a469a7d3911441ac9028c13bcb6

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   289844 bcd223ca5593b3e70ace5bff8cbe83f3
          Size/MD5:   347992 d7a498f92ee3489e980b15027afbf6f9
          Size/MD5:   233980 c57ce65a1bf77fa58853eeb92efa1972
          Size/MD5:  1489804 1067d344807c1ec295b7b11527dd6368
          Size/MD5:  3937004 be119d4f250a2fcc95889eec5877cdde
          Size/MD5:   296296 07de597cf6d65483b636eb3f57fb648d
          Size/MD5:  1644722 f24dd3ceaf26016a508333e9c2fb8f33
          Size/MD5:    95738 d1a5f3ff7406d90ec25431a7e9bef5d9
          Size/MD5:   866236 11c86742f82aa5ee43628bcbc9af2b0c
          Size/MD5:  1676596 c769d5058e6133c02090415a2fdb1e7e

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   276668 fe85ffe62d8df0b5d89491b4a0e6ebee
          Size/MD5:   330704 df607424eeaa1b077a23281213585d47
          Size/MD5:   218008 636a7f5f404f77b344b7a4a295a4e362
          Size/MD5:  1385622 695c77c4eb42081479ee8b317a82f5a5
          Size/MD5:  3627582 7291a7ffe61b52f5176e18b9fe5da171
          Size/MD5:   296300 beae95a7dee9e22012afaccc96b72e8f
          Size/MD5:  1534996 30a2552be17afab7d6a06b29abc90f93
          Size/MD5:    84616 3082fa716505e97dd1fd0517b1590764
          Size/MD5:   800436 ab8ab88d56bdf84bad74206db09397ed
          Size/MD5:  1560862 0c1e5d5410709264588f6288cd96889d

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   286282 effe3d661df4368a898af7a11bce2ff3
          Size/MD5:   346996 f70b7152b16e10e0de0d35563f2c2fc3
          Size/MD5:   235868 2919b9928f26f86d001b48a817b6a9d7
          Size/MD5:  1460506 15396150a7bdc4a949845d40b7ffdf4a
          Size/MD5:  4056616 b3329a6a302bd4c7f7a5f5904ea5895d
          Size/MD5:   296330 205e730f40d54893c496feabfb5165c9
          Size/MD5:  1598588 29a3492ae5e086bb38b18bc152b1351a
          Size/MD5:   108818 150dd0030af34b93334bf3949a2e1d7c
          Size/MD5:   853346 4b6d5a5d361f91c0d10f1c8dbdf986db
          Size/MD5:  1625978 6547d965eb809fc7ee09ffb2ccee5f95

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   288150 a9502e3ac5f6db1c582baac907dabd7c
          Size/MD5:   317804 2df48d244d6768768a6c0a6c014bdcf3
          Size/MD5:   225244 ad9380975f714206b697832689487f5f
          Size/MD5:  1405488 04e398925fc3f88402aa53f6e44f8dc3
          Size/MD5:  3718900 cc4c29ccbbd8d61813eb0c5f53d64f6f
          Size/MD5:   296676 7ca68cd7a0d303354b462119ba2eb50d
          Size/MD5:  1539630 d08638542dd750f5b6a18a1b34bf9a22
          Size/MD5:    87546 0128f7f705dd2440c9bc82176aaee17b
          Size/MD5:   785152 e958a5c78ea7e0c37c70e9f7744260e1
          Size/MD5:  1565594 aac62889c3ad8390e69cb49996e412e5

Updated packages for Ubuntu 7.10:

  Source archives:

          Size/MD5:   111949 3d2e381741cbe58be024b4e54303be31
          Size/MD5:     1118 6b737413486fdb59e04dbfa97dbcd2b9
          Size/MD5:   787001 b7d2bed6845d727f47fc18e286c2cf3d
          Size/MD5:   818953 cf576033eabf78c68fb3b0e15d5653c3
          Size/MD5:     2426 ea5a77e31e1b6e4585e133bfc100ac1f
          Size/MD5:  7995168 cbbc69f99b93172fde667f1241b5d5a4

  Architecture independent packages:

          Size/MD5:   274130 ffeb1b1460f14687631460d8b9722d1c

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   284292 93f77fa55387af410a9393eb7fa61530
          Size/MD5:   343054 97cec8d3b603e811706c3694f8d72311
          Size/MD5:   227710 621bec700f73590aa5a92aacae602930
          Size/MD5:  1511136 0138aa17662a653e820d9c843aad7a96
          Size/MD5:  1702762 7103d2bd7e9cadc8254f01053c681ebc
          Size/MD5: 12744032 b1099344969e559fe7936587682868c4
          Size/MD5:  3993802 3cc072bbb6760c33bc75c94620a3e60c
          Size/MD5:   321850 d4ac87b277394f89c26a18391471cd44
          Size/MD5:  1666864 c3e7267beb4233a3bdb6a814320895ef
          Size/MD5:   106986 74a4aaef0fe40d712e456c07372508d1
          Size/MD5:   882634 6145c1d8a678c2a0768cd23806c988d1
          Size/MD5:  1723492 e37f4ac2556435f9e9a3aaef0142f03d

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   270150 79711c623bbf74e6f840d81bb31b5012
          Size/MD5:   327116 d17979671f0572a3c255591c88bb1ef0
          Size/MD5:   211192 7fd431cc55653ceefa0a3269d994cdab
          Size/MD5:  1407266 c0b531b6ca45af826dfcae97963f2696
          Size/MD5:  1587404 cec1a742c74683f02ace6c702c3b32e5
          Size/MD5: 12384782 3b86d77ae1b10bcd0c941ffa8d736ec2
          Size/MD5:  3676768 6ef62c6463c1b4b9ac19f951665ecf72
          Size/MD5:   321862 4b06b69276c4854754ca9e7b664e2348
          Size/MD5:  1557342 d91929ced2462c80b1a3cdb74b9bacf5
          Size/MD5:    94554 659617b8be940d2cd28be6bb5650e4b1
          Size/MD5:   817652 878577ad82b48cc98cfcfd3ea52596fb
          Size/MD5:  1621898 7779d9557d0108e7a7296997cdae89fd

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   279410 90945e0322805a90a787e4238467c30c
          Size/MD5:   344186 c2140aac8038cf030060cd69b7d2958f
          Size/MD5:   228536 72091b2de01dffcbc7a33d1e29ef5735
          Size/MD5:  1486276 7e0a0a1ccd059df56ec112cf251002d0
          Size/MD5:  1656404 7bb6b42035f1bb6d0585646cb4dbfb1a
          Size/MD5: 13009942 095cb90c0725faeed42a538760001450
          Size/MD5:  4099412 f7dc6da84d726a0ece9fd474a5b3f86a
          Size/MD5:   321880 37cc9a78b8a492033ef6a27e4d966d88
          Size/MD5:  1625024 b7f283417ce8e868e0624b58e2abbe60
          Size/MD5:   120032 0a95a6a3d199d3c3dddaa7212c7e66de
          Size/MD5:   868592 b3602f4115dcb368430a31efc496b6b8
          Size/MD5:  1653864 ce14fcffd37c87e1e8eb0f9bbea59920

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   280466 caadd7cf6cc4d58f82abb8b1584a1a95
          Size/MD5:   314336 3f1f4dfcfc7036737a3cfb55304cedef
          Size/MD5:   217778 e0773329e09d730a32b4294777f38ad5
          Size/MD5:  1424772 de3141e7a33670fc35f30d4e7dd277e3
          Size/MD5:  1588120 921766033207ba0f982ba2f374d722d0
          Size/MD5: 12373800 4caed97e739f4274b002e7c5984cfafd
          Size/MD5:  3770978 cd0b0747dc1567227594402be13cfb3f
          Size/MD5:   322244 53a8e194bc28df26e5ed1f1d3421dd63
          Size/MD5:  1558512 8c27a71a54da7fdac44a78955a5c9ef5
          Size/MD5:    98026 b7d10f5b81eea6e28951a23e9be73824
          Size/MD5:   800286 730715ba0d92aed21edb7b095508d6fe
          Size/MD5:  1586028 26945e9dfdea40d676be656db9fcae30