It was discovered that libXfont incorrectly followed symlinks when opening font files. A local unprivileged user could use this issue to cause the X server to access arbitrary files, including special device files.
1:1.4.7-1ubuntu0.41:1.5.1-1ubuntu0.16.04.41:2.0.1-3~ubuntu16.04.3