Stay Secure with the Latest Linux Advisories

security advisoryFedoralocal access

Fedora 29: FEDORA-2019-5bf13218a5 Moderate: ibus Local Access Issue

Security fix for CVE-2019-14822. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-5bf13218a5 2019-09-29 02:22:09.538553 --------------------------------------------------------------------------------Name : ibus Product : Fedora 29 Version : 1.5.19 Release : 17.fc29 URL : https://github.com/ibus/ibus/wiki Summary : Intelligent Input Bus for Linux OS Description : IBus means Intelligent Input Bus. It is an input framework for Linux OS. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2019-14822 --------------------------------------------------------------------------------ChangeLog: * Fri Sep 13 2019 Takao Fujiwara - 1.5.19-17 - Fix #1751940 - CVE-2019-14822 GDBusServer peer authorization * Tue Feb 5 2019 Takao Fujiwara - 1.5.19-16 - Resolves: #1671286 wrong mutex * Mon Feb 4 2019 Kalev Lember - 1.5.19-15 - Update BRs for vala packaging changes - Co-own vala and gir directories * Fri Feb 1 2019 Fedora Release Engineering - 1.5.19-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild * Tue Jan 29 2019 Takao Fujiwara - 1.5.19-13 - Resolves: #1470673 Replace assert with warning for .XCompose - Update APIs for Hangul preedit in Flatpak - Fix Atom and Slack for Flatpak - Resolves: #1663528 Check if the mutex is not unlocked before the clear * Thu Dec 20 2018 Takao Fujiwara - 1.5.19-12 - Use ISO 639-3 names instead of 639 - Connect to button-press-event only with IBUS_ENGINE_PREEDIT_COMMIT * Wed Dec 12 2018 Takao Fujiwara - 1.5.19-11 - Fix SEGV on mouse clicks when ibus-daemon not running * Mon Dec 10 2018 Takao Fujiwara - 1.5.19-10 - Always reset and clear preedit on mouse click - Show compose preedit with custom compose file - Clear preedit in IBusEngineSimple with focus changes - Obsolete ibus-xkbc since Fedora 30 * Thu Nov 15 2018 Takao Fujiwara - 1.5.19-9 -Detect mouse click to commit Hangul preedit - Do not delete IBUS_CAP_SURROUNDING_TEXT * Tue Nov 6 2018 Takao Fujiwara - 1.5.19-8 - Reverted noarch for devel-docs by mistake * Wed Oct 31 2018 Takao Fujiwara - 1.5.19-7 - RHEL code reviews * Fri Oct 26 2018 Takao Fujiwara - 1.5.19-6 - dbus-x11 is not required in Fedora 30 - Add Conflicts for Fedora 28 * Tue Oct 23 2018 Takao Fujiwara - 1.5.19-5 - Use __python3 instead of python3 - Delete Requires ibus in ibus-gtk* for Flatpak --------------------------------------------------------------------------------References: [ 1 ] Bug #1717958 - CVE-2019-14822 ibus: missing authorization allows local attacker to access the input bus of another user https://bugzilla.redhat.com/show_bug.cgi?id=1717958 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-5bf13218a5' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Fedora 29 has issued a security notice for vulnerabilities in the ibus component related to CVE-2019-14822, detailing crucial patch updates for user protection. Fedora 29 Update, IBusSecurity Fix, Input Bus Authorization, CVE-2019-14822 Advisory. . LinuxSecurity.com Team

Sep 28, 2019 Fedora