Stay Secure with the Latest Linux Advisories

security advisoryupdateaccess control

Ubuntu Security Notice USN-4134-2: IBus Regression Detected and Addressed

USN 4134-1 introduced a regression in IBus.. =========================================================================Ubuntu Security Notice USN-4134-2 September 23, 2019 ibus regression ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: USN 4134-1 introduced a regression in IBus. Software Description: - ibus: Intelligent Input Bus - core Details: USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation. Original advisory details: Simon McVittie discovered that IBus did not enforce appropriate access controls on its private D-Bus socket. A local unprivileged user who discovers the IBus socket address of another user could exploit this to capture the key strokes of the other user. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: ibus 1.5.19-1ubuntu2.2 Ubuntu 18.04 LTS: ibus 1.5.17-3ubuntu5.2 Ubuntu 16.04 LTS: ibus 1.5.11-1ubuntu2.3 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4134-2 https://ubuntu.com/security/notices/USN-4134-1 https://bugs.launchpad.net/ubuntu/+source/ibus/+bug/1844853 Package Information: https://launchpad.net/ubuntu/+source/ibus/1.5.19-1ubuntu2.2 https://launchpad.net/ubuntu/+source/ibus/1.5.17-3ubuntu5.2 https://launchpad.net/ubuntu/+source/ibus/1.5.11-1ubuntu2.3 . The Ubuntu Security Notice USN-4135-1 highlights vulnerabilities related to the NetworkManager affecting Ubuntu 18.04 and newer systems.. IBus Regression, Ubuntu Security Notice, AccessControl Fix. . Severity: Critical. LinuxSecurity.com Team

Sep 23, 2019 •Critical Ubuntu