Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 22.04 LTS USN-5382-2 Moderate: Libinput Crash Risk

ubuntu
Calendar Grey May 2, 2022
Dist Ubuntu Esm H88
libinput flaw may lead to system crashes or reveal private data. Follow the update steps for Ubuntu platforms.
libinput could be made to crash or expose sensitive information.

Summary

libinput could be made to crash or expose sensitive information.

Software Description:

- libinput: Input device management and event handling library

Details:

USN-5382-1 fixed a vulnerability in libinput. This update provides the

corresponding updates for Ubuntu 22.04 LTS.

Original advisory details:

Albin Eldstål-Ahrens and Lukas Lamster discovered libinput did not properly

handle input devices with specially crafted names. A local attacker with

physical access could use this to cause libinput to crash or expose

sensitive information.

Topics%20covered

Topics Covered

security advisory Ubuntu information exposure crash risk libinput

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
  libinput10                      1.20.0-1ubuntu0.1

After a standard system update you need to log out of all desktop sessions
and then log back in to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5382-2

https://ubuntu.com/security/notices/USN-5382-1

CVE-2022-1215

May 02, 2022

Topics%20covered

Topics Covered

security advisory Ubuntu information exposure crash risk libinput

Package Information

https://launchpad.net/ubuntu/+source/libinput/1.20.0-1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.