Skip to content
OpenAdvisories
Unscored USN-4134-2 0 CVEs

ibus regression

Published Sep 23, 2019 · Updated Apr 22, 2026

Summary

USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a
regression when being used with Qt applications. This update reverts the
security fix pending further investigation.

Original advisory details:

Simon McVittie discovered that IBus did not enforce appropriate access
controls on its private D-Bus socket. A local unprivileged user who
discovers the IBus socket address of another user could exploit this to
capture the key strokes of the other user.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS ibus 1.5.11-1ubuntu2.3
Ubuntu · 18.04 LTS 18.04:LTS ibus 1.5.17-3ubuntu5.2

References

  • report
    https://launchpad.net/bugs/1844853