Summary
[1.30.1-2]
- CVE-2026-50292: sanitize phys before printing it in libinput-device-group
Resolves: RHEL-182371
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | libinput | 0:1.30.1-2.el10_2 |
| Oracle Linux · 10 | libinput-devel | 0:1.30.1-2.el10_2 |
| Oracle Linux · 10 | libinput-utils | 0:1.30.1-2.el10_2 |
Vulnerabilities 1
-
High 7.4
In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev propert…