USN-1803-1: X.Org X server vulnerability

Releases

• Ubuntu 12.10
• Ubuntu 12.04
• Ubuntu 11.10
• Ubuntu 10.04

Packages

• xorg-server - X.Org X server
• xorg-server-lts-quantal - X.Org X server

Details

It was discovered that the X.Org X server did not properly clear input
events in certain circumstances. A local attacker with physical access
could use this flaw to capture keystrokes.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.10

• xserver-xorg-core - 2:1.13.0-0ubuntu6.2

Ubuntu 12.04

• xserver-xorg-core-lts-quantal - 2:1.13.0-0ubuntu6.1~precise3
• xserver-xorg-core - 2:1.11.4-0ubuntu10.13

Ubuntu 11.10

• xserver-xorg-core - 2:1.10.4-1ubuntu4.5

Ubuntu 10.04

• xserver-xorg-core - 2:1.7.6-2ubuntu7.12

After a standard system update you need to restart your session to make
all the necessary changes.

References

• CVE-2013-1940