USN-4134-2
ibus regression
USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation.
Original advisory details:
Simon McVittie discovered that IBus did not enforce appropriate access controls on its private D-Bus socket. A local unprivileged user who discovers the IBus socket address of another user could exploit this to capture the key strokes of the other user.
What each source reports
OSV No score
ibus regression
USN-4134-1 fixed a vulnerability in IBus. The security fix introduced a regression when being used with Qt applications. This update reverts the security fix pending further investigation.
Original advisory details:
Simon McVittie discovered that IBus did not enforce appropriate access controls on its private D-Bus socket. A local unprivileged user who discovers the IBus socket address of another user could exploit this to capture the key strokes of the other user.
- Record
USN-4134-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ibusUbuntu:16.04:LTS |
before 1.5.11-1ubuntu2.3, plus listed versions 1.5.10-1ubuntu11.5.11-1ubuntu11.5.11-1ubuntu21.5.11-1ubuntu2.11.5.11-1ubuntu2.2 |
1.5.11-1ubuntu2.3 |
ibusUbuntu:18.04:LTS |
before 1.5.17-3ubuntu5.2, plus listed versions 1.5.14-2ubuntu11.5.14-3ubuntu11.5.17-1ubuntu11.5.17-3ubuntu11.5.17-3ubuntu31.5.17-3ubuntu41.5.17-3ubuntu51.5.17-3ubuntu5.1 |
1.5.17-3ubuntu5.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4134-2 is a vulnerability with no CVSS score yet in ibus, published September 23, 2019. No source lists public exploit code. Fixed in ibus 1.5.11-1ubuntu2.3.