USN-5614-1: Wayland vulnerability

Releases

• Ubuntu 22.04 LTS
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• wayland - Wayland compositor infrastructure

Details

It was discovered that Wayland incorrectly handled reference counting
certain objects. An attacker could use this issue to cause Wayland to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 22.04

• libwayland-egl1 - 1.20.0-1ubuntu0.1
• libwayland-bin - 1.20.0-1ubuntu0.1
• libwayland-server0 - 1.20.0-1ubuntu0.1
• libwayland-client0 - 1.20.0-1ubuntu0.1

Ubuntu 20.04

• libwayland-egl1 - 1.18.0-1ubuntu0.1
• libwayland-bin - 1.18.0-1ubuntu0.1
• libwayland-server0 - 1.18.0-1ubuntu0.1
• libwayland-client0 - 1.18.0-1ubuntu0.1

Ubuntu 18.04

• libwayland-egl1 - 1.16.0-1ubuntu1.1~18.04.4
• libwayland-bin - 1.16.0-1ubuntu1.1~18.04.4
• libwayland-server0 - 1.16.0-1ubuntu1.1~18.04.4
• libwayland-client0 - 1.16.0-1ubuntu1.1~18.04.4

After a standard system update you need to reboot your computer to make all
the necessary changes.

References

• CVE-2021-3782

Related notices

• USN-5614-2: libwayland-server0, libwayland-cursor0, libwayland-client0, libwayland-bin, wayland, libwayland-doc, libwayland-dev