This update for ibus fixes the following issues :

Security issue fixed :

CVE-2019-14822: Fixed a misconfiguration of the DBus server that allowed an unprivileged user to monitor and send method calls to the ibus bus of another user. (bsc#1150011)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2019-14822

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the ibus packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A flaw was discovered in ibus that allows any     unprivileged user to monitor and send method calls to     the ibus bus of another user due to a misconfiguration     in the DBus server setup. A local attacker may use this     flaw to intercept all keystrokes of a victim user who     is using the graphical interface, change the input     method engine, or modify other input related     configurations of the victim user.(CVE-2019-14822)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has ibus packages installed that are affected by a vulnerability:

  - A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and     send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A     local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical     interface, change the input method engine, or modify other input related configurations of the victim     user. (CVE-2019-14822)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1880 advisory.

    [2.56.4-8]
    - Backport patches for GDBus auth       Resolves: #1777213

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
128989	SUSE SLES12 Security Update : ibus (SUSE-SU-2019:2388-1)	Nessus	SuSE Local Security Checks	2019/9/18	2024/4/24	high
128990	SUSE SLED12 / SLES12 Security Update : ibus (SUSE-SU-2019:2389-1)	Nessus	SuSE Local Security Checks	2019/9/18	2024/4/24	high
129420	Fedora 29 : ibus (2019-5bf13218a5)	Nessus	Fedora Local Security Checks	2019/9/30	2024/4/22	high
129646	Fedora 31 : ibus (2019-c10700afdc)	Nessus	Fedora Local Security Checks	2019/10/7	2024/4/19	high
139958	EulerOS 2.0 SP8 : ibus (EulerOS-SA-2020-1855)	Nessus	Huawei Local Security Checks	2020/8/28	2024/2/23	high
147362	NewStart CGSL CORE 5.04 / MAIN 5.04 : ibus Vulnerability (NS-SA-2021-0019)	Nessus	NewStart CGSL Local Security Checks	2021/3/10	2021/3/11	high
180946	Oracle Linux 8 : ibus / and / glib2 (ELSA-2020-1880)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	high

检测

插件搜索

high

high

high

high

high

high

high