Summary
USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a
regression when being used with Qt applications. This update reverts the
security fix pending further investigation.
Original advisory details:
Simon McVittie discovered that IBus did not enforce appropriate access
controls on its private D-Bus socket. A local unprivileged user who
discovers the IBus socket address of another user could exploit this to
capture the key strokes of the other user.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | ibus | 1.5.11-1ubuntu2.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | ibus | 1.5.17-3ubuntu5.2 |
References
-
report
https://launchpad.net/bugs/1844853