Ubuntu alert USN-5656-1 (jackd2)

From:
             
 
Ian Constantin <ian.constantin@canonical.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-5656-1] JACK vulnerability
Date:
             
 
Tue, 04 Oct 2022 19:00:49 -0400
Message-ID:
             
 
<bbfb8bb9-3edd-52af-f789-77e84473afba@canonical.com>
==========================================================================
Ubuntu Security Notice USN-5656-1
October 04, 2022

jackd2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 ESM

Summary:

JACK could cause a crash in certain conditions.

Software Description:
- jackd2: JACK Audio Connection Kit (server and example clients)

Details:

Joseph Yasi discovered that JACK incorrectly handled the closing of a 
socket in certain conditions. An attacker could potentially use this 
issue to cause a crash.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   jackd2 
1.9.10+20150825git1ed50c92~dfsg-1ubuntu1+esm1
   jackd2-firewire 
1.9.10+20150825git1ed50c92~dfsg-1ubuntu1+esm1
   libjack-jackd2-0 
1.9.10+20150825git1ed50c92~dfsg-1ubuntu1+esm1

In general, a standard system update will make all the necessary changes.

References:
   https://ubuntu.com/security/notices/USN-5656-1
   CVE-2019-13351