Ubuntu Security Notice USN-1107-1

Ubuntu Security Notice 1107-1 – Sebastian Krahmer discovered that the xrdb utility incorrectly filtered crafted hostnames. An attacker could use this flaw with a malicious DHCP server or with a remote xdmcp login and execute arbitrary code, resulting in root privilege escalation.

Source: Ubuntu Security Notice USN-1107-1