USN-7085-2: X.Org X Server vulnerability

Packages

xorg-server - X.Org X11 server
xorg-server-hwe-16.04 - X.Org X11 server
xorg-server-hwe-18.04 - X.Org X11 server

Details

USN-7085-1 fixed a vulnerability in X.Org. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled
certain memory operations in the X Keyboard Extension. An attacker could
use this issue to cause the X Server to crash, leading to a denial of
service, or possibly execute arbitrary code.

USN-7085-1 fixed a vulnerability in X.Org. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled
certain memory operations in the X Keyboard Extension. An attacker could
use this issue to cause the X Server to crash, leading to a denial of
service, or possibly execute arbitrary code.

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
18.04 bionic	xserver-xorg-core – 2:1.19.6-1ubuntu4.15+esm9
	xserver-xorg-core-hwe-18.04 – 2:1.20.8-2ubuntu2.2~18.04.11+esm1
	xwayland – 2:1.19.6-1ubuntu4.15+esm9
	xwayland-hwe-18.04 – 2:1.20.8-2ubuntu2.2~18.04.11+esm1
16.04 xenial	xserver-xorg-core – 2:1.18.4-0ubuntu0.12+esm14
	xserver-xorg-core-hwe-16.04 – 2:1.19.6-1ubuntu4.1~16.04.6+esm6
	xwayland – 2:1.18.4-0ubuntu0.12+esm14
	xwayland-hwe-16.04 – 2:1.19.6-1ubuntu4.1~16.04.6+esm6

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

CVE-2024-9632

CVE-2024-9632

USN-7085-1

USN-7085-1

Packages

Details

Update instructions

Reduce your security exposure

References

Related notices