Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 555
Alerts This Week
Warning Icon 1 555

Ubuntu 16.04: USN-5778-2 Critical: X.Org Server Security Issues

ubuntu
Calendar Grey February 16, 2023
Dist Ubuntu Esm H88
Patches for various vulnerabilities in Ubuntu's X.Org X Server impact earlier versions. Ensure your system is updated without delay.
Several security issues were fixed in X.Org X Server.

Summary

Several security issues were fixed in X.Org X Server.

Software Description:

- xorg-server: X.Org X11 server

- xorg-server-hwe-16.04: X.Org X11 server

Details:

USN-5778-1 fixed several vulnerabilities in X.Org. This update provides

the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Jan-Niklas Sohn discovered that X.Org X Server extensions contained

multiple security issues. An attacker could possibly use these issues to

cause the X Server to crash, execute arbitrary code, or escalate

privileges.

Topics%20covered

Topics Covered

security advisory update Ubuntu server X.Org catastrophic issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
  xserver-xorg-core               2:1.18.4-0ubuntu0.12+esm5
  xserver-xorg-core-hwe-16.04     2:1.19.6-1ubuntu4.1~16.04.6+esm4
  xwayland                        2:1.18.4-0ubuntu0.12+esm5
  xwayland-hwe-16.04              2:1.19.6-1ubuntu4.1~16.04.6+esm4

Ubuntu 14.04 ESM:
  xserver-xorg-core               2:1.15.1-0ubuntu2.11+esm7

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-5778-2

https://ubuntu.com/security/notices/USN-5778-1

CVE-2022-4283, CVE-2022-46340, CVE-2022-46341, CVE-2022-46342,

CVE-2022-46343, CVE-2022-46344, CVE-2023-0494

Severity
critical
Lowest
Low
Medium
High
Critical

February 16, 2023

Topics%20covered

Topics Covered

security advisory update Ubuntu server X.Org catastrophic issue

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.