USN-5656-1: JACK vulnerability
4 October 2022
JACK could cause a crash in certain conditions.
Releases
Packages
- jackd2 - JACK Audio Connection Kit (server and example clients)
Details
Joseph Yasi discovered that JACK incorrectly handled the closing of a socket
in certain conditions. An attacker could potentially use this issue to
cause a crash.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
jackd2
-
1.9.10+20150825git1ed50c92~dfsg-1ubuntu1+esm1
Available with Ubuntu Pro
-
jackd2-firewire
-
1.9.10+20150825git1ed50c92~dfsg-1ubuntu1+esm1
Available with Ubuntu Pro
-
libjack-jackd2-0
-
1.9.10+20150825git1ed50c92~dfsg-1ubuntu1+esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.