[ubuntu/xenial-security] ibus 1.5.11-1ubuntu2.4 (Accepted)

Alex Murray alex.murray at canonical.com
Tue Mar 24 10:10:00 UTC 2020


ibus (1.5.11-1ubuntu2.4) xenial-security; urgency=medium

  * SECURITY UPDATE: Lack of access control on DBus socket allows other
    local users to make arbitrary method calls
    - debian/patches/CVE-2019-14822.patch:
      Re-enable to implement GDBusAuthObserver callback in bus/server.c to
      add access control to the DBus server socket
    - CVE-2019-14822
  * Add breaks for older libglib2.0-0 releases which do not contain the
    GDBusServer fix for Qt applications

Date: 2020-03-24 00:23:14.504502+00:00
Changed-By: Alex Murray <alex.murray at canonical.com>
https://launchpad.net/ubuntu/+source/ibus/1.5.11-1ubuntu2.4
-------------- next part --------------
Sorry, changesfile not available.


More information about the Xenial-changes mailing list