USN-7085-1: X.Org X Server vulnerability

USN-7085-1: X.Org X Server vulnerability
30 October 2024

X.Org X Server could be made to crash or run programs if it received specially crafted data.

Releases
Ubuntu 24.10 Ubuntu 24.04 LTS Ubuntu 22.04 LTS Ubuntu 20.04 LTS

Packages
xorg-server - X.Org X11 server
xwayland - X server for running X clients under Wayland

Details
Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled
certain memory operations in the X Keyboard Extension. An attacker could
use this issue to cause the X Server to crash, leading to a denial of
service, or possibly execute arbitrary code.

Update instructions
The problem can be corrected by updating your system to the following package versions:

Ubuntu 24.10

• xserver-xorg-core - 2:21.1.13-2ubuntu1.1
• xwayland - 2:24.1.2-1ubuntu0.1
  Ubuntu 24.04
• xserver-xorg-core - 2:21.1.12-1ubuntu1.1
• xwayland - 2:23.2.6-1ubuntu0.1

After a standard system update you need to reboot your computer to make all the necessary changes.