Summary
USN-5778-1 fixed several vulnerabilities in X.Org. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
Jan-Niklas Sohn discovered that X.Org X Server extensions contained
multiple security issues. An attacker could possibly use these issues to
cause the X Server to crash, execute arbitrary code, or escalate
privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | xorg-server | 2:1.15.1-0ubuntu2.11+esm7 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | xorg-server | 2:1.18.4-0ubuntu0.12+esm5 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | xorg-server-hwe-16.04 | 2:1.19.6-1ubuntu4.1~16.04.6+esm4 |
Vulnerabilities 7
-
High 8.8
A vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request o…
-
High 8.8
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request acces…
-
High 8.8
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request…
-
High 8.8
A vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes requ…
-
High 7.8
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer…
-
High 7.8
A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be e…
-
Unscored —
A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has …
References
-
report
https://ubuntu.com/security/CVE-2022-4283
-
report
https://ubuntu.com/security/CVE-2022-46340
-
report
https://ubuntu.com/security/CVE-2022-46341
-
report
https://ubuntu.com/security/CVE-2022-46342
-
report
https://ubuntu.com/security/CVE-2022-46343
-
report
https://ubuntu.com/security/CVE-2022-46344
-
report
https://ubuntu.com/security/CVE-2023-0494