=========================================================================Ubuntu Security Notice USN-5614-2
October 03, 2022

wayland vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 ESM

Summary:

Wayland could be made to crash or run programs.

Software Description:
- wayland: Wayland compositor infrastructure

Details:

USN-5614-1 fixed a vulnerability in Wayland. This update
provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

  It was discovered that Wayland incorrectly handled reference counting
  certain objects. An attacker could use this issue to cause Wayland to
  crash, resulting in a denial of service, or possibly execute arbitrary
  code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   libwayland-bin                     1.12.0-1~ubuntu16.04.3+esm1
   libwayland-client0               1.12.0-1~ubuntu16.04.3+esm1
   libwayland-cursor0              1.12.0-1~ubuntu16.04.3+esm1
   libwayland-server0              1.12.0-1~ubuntu16.04.3+esm1

After a standard system update you need to reboot your computer to make all
the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-5614-2
   https://ubuntu.com/security/notices/USN-5614-1
   CVE-2021-3782

Ubuntu 5614-2: Wayland vulnerability

October 3, 2022
Wayland could be made to crash or run programs.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 ESM: libwayland-bin 1.12.0-1~ubuntu16.04.3+esm1 libwayland-client0 1.12.0-1~ubuntu16.04.3+esm1 libwayland-cursor0 1.12.0-1~ubuntu16.04.3+esm1 libwayland-server0 1.12.0-1~ubuntu16.04.3+esm1 After a standard system update you need to reboot your computer to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5614-2

https://ubuntu.com/security/notices/USN-5614-1

CVE-2021-3782

Severity
October 03, 2022

Package Information

Related News