==========================================================================
Ubuntu Security Notice USN-2918-1
March 03, 2016

pixman vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 14.04 LTS
– Ubuntu 12.04 LTS

Summary:

pixman could be made to crash or run programs as your login if it processed
specially crafted data.

Software Description:
– pixman: pixel-manipulation library for X and cairo

Details:

Vincent LE GARREC discovered an integer underflow in pixman. If a user were
tricked into opening a specially crafted file, a remote attacker could
cause pixman to crash, resulting in a denial of service, or possibly
execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
libpixman-1-0 0.30.2-2ubuntu1.1

Ubuntu 12.04 LTS:
libpixman-1-0 0.30.2-1ubuntu0.0.0.0.3

After a standard system update you need to restart your session to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2918-1
CVE-2014-9766

Package Information:
https://launchpad.net/ubuntu/+source/pixman/0.30.2-2ubuntu1.1
https://launchpad.net/ubuntu/+source/pixman/0.30.2-1ubuntu0.0.0.0.3

—–BEGIN PGP SIGNATURE—–
Version: GnuPG v2
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=uD59
—–END PGP SIGNATURE—–
—