USN-4134-2: IBus regression
USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation. Original advisory details: Simon McVittie discovered that IBus did not enforce appropriate access controls on its private D-Bus socket. A local unprivileged user who discovers the IBus socket address of another user could exploit this to capture the key strokes of the other user.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is USN-4134-2.
What is the title of this vulnerability?
The title of this vulnerability is 'IBus regression'.
How does this vulnerability affect IBus?
This vulnerability affects IBus by introducing a regression when used with Qt applications.
What is the severity of this vulnerability?
The severity of this vulnerability is not specified.
How can I fix this vulnerability?
To fix this vulnerability, you need to update IBus to the specified remedy version for your Ubuntu release.