Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2015-0255

Published: 11 February 2015

X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (crash) via a crafted string length value in a XkbSetGeometry request.

From the Ubuntu Security Team

USN-2500-1 addressed CVE-2015-0255 for xorg-server. This update provides the corresponding fix for VNC4 on Ubuntu 14.04 ESM.

Priority

Medium

Status

Package Release Status
vnc4
Launchpad, Ubuntu, Debian
artful Ignored
(end of life)
bionic Needed

cosmic Ignored
(end of life)
disco Not vulnerable
(transitional package)
eoan Not vulnerable
(transitional package)
focal Does not exist

lucid Ignored
(end of life)
upstream Needed

vivid Ignored
(end of life)
xenial
Released (4.1.1+xorg4.3.0-37.3ubuntu2.1+esm1)
Available with Ubuntu Pro
impish Does not exist

trusty
Released (4.1.1+xorg4.3.0-37ubuntu5.0.2+esm1)
Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
groovy Does not exist

hirsute Does not exist

jammy Does not exist

kinetic Does not exist

lunar Does not exist

precise Ignored
(end of life)
utopic Ignored
(end of life)
wily Ignored
(end of life)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
mantic Does not exist

Patches:
upstream: http://cgit.freedesktop.org/xorg/xserver/commit/?id=81c90dc8f0aae3b65730409b1b615b5fa7280ebd
upstream: http://cgit.freedesktop.org/xorg/xserver/commit/?id=20079c36cf7d377938ca5478447d8b9045cb7d43


xorg-server-lts-raring
Launchpad, Ubuntu, Debian
impish Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

kinetic Does not exist

lucid Does not exist

lunar Does not exist

precise Ignored
(end of life)
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

mantic Does not exist

xorg-server-lts-utopic
Launchpad, Ubuntu, Debian
impish Does not exist

artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

jammy Does not exist

kinetic Does not exist

lucid Does not exist

lunar Does not exist

precise Does not exist

trusty
Released (2:1.16.0-1ubuntu1.2~trusty2)
upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

mantic Does not exist

xorg-server
Launchpad, Ubuntu, Debian
vivid
Released (2:1.16.2.901-1ubuntu4)
artful
Released (2:1.16.2.901-1ubuntu4)
bionic
Released (2:1.16.2.901-1ubuntu4)
cosmic
Released (2:1.16.2.901-1ubuntu4)
disco
Released (2:1.16.2.901-1ubuntu4)
eoan
Released (2:1.16.2.901-1ubuntu4)
focal
Released (2:1.16.2.901-1ubuntu4)
groovy
Released (2:1.16.2.901-1ubuntu4)
hirsute
Released (2:1.16.2.901-1ubuntu4)
impish
Released (2:1.16.2.901-1ubuntu4)
jammy
Released (2:1.16.2.901-1ubuntu4)
kinetic
Released (2:1.16.2.901-1ubuntu4)
lucid Ignored
(end of life)
lunar
Released (2:1.16.2.901-1ubuntu4)
precise
Released (2:1.11.4-0ubuntu10.17)
trusty
Released (2:1.15.1-0ubuntu2.7)
upstream Needed

utopic
Released (2:1.16.0-1ubuntu1.3)
wily
Released (2:1.16.2.901-1ubuntu4)
xenial
Released (2:1.16.2.901-1ubuntu4)
yakkety
Released (2:1.16.2.901-1ubuntu4)
zesty
Released (2:1.16.2.901-1ubuntu4)
mantic
Released (2:1.16.2.901-1ubuntu4)
Patches:


upstream: http://cgit.freedesktop.org/xorg/xserver/commit/?id=81c90dc8f0aae3b65730409b1b615b5fa7280ebd
upstream: http://cgit.freedesktop.org/xorg/xserver/commit/?id=20079c36cf7d377938ca5478447d8b9045cb7d43
xorg-server-lts-quantal
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lucid Does not exist

lunar Does not exist

precise Ignored
(end of life)
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

mantic Does not exist

xorg-server-lts-saucy
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lucid Does not exist

lunar Does not exist

precise Ignored
(end of life)
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

mantic Does not exist

xorg-server-lts-trusty
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

disco Does not exist

eoan Does not exist

focal Does not exist

groovy Does not exist

hirsute Does not exist

impish Does not exist

jammy Does not exist

kinetic Does not exist

lucid Does not exist

lunar Does not exist

precise
Released (2:1.15.1-0ubuntu2~precise5)
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

mantic Does not exist