Red Hat Security AdvisoryRHSA-2020:1880
ibus and glib2 security and bug fix update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) glib2-doc-2.56.4-8.el8, glib2-static-2.56.4-8.el8, ibus-devel-1.5.19-11.el8 +1
- Red Hat Enterprise Linux AppStream (v. 8) ibus-1.5.19-11.el8, ibus-gtk2-1.5.19-11.el8, ibus-gtk3-1.5.19-11.el8 +3
- Red Hat Enterprise Linux BaseOS (v. 8) glib2-2.56.4-8.el8, glib2-devel-2.56.4-8.el8, glib2-fam-2.56.4-8.el8 +1
Fixes 1 record
Priority LOW 31
A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00365 · Published 2019-11-25 · Partial fix CWE-862
