UbuntuUpdates.org

Package "libinput-bin"

Name: libinput-bin

Description:

input device management and event handling library - udev quirks

Latest version: 1.25.0-1ubuntu3.7
Release: noble (24.04)
Level: security
Repository: main
Head package: libinput
Homepage: https://www.freedesktop.org/wiki/Software/libinput/

Links


Download "libinput-bin"


Other versions of "libinput-bin" in Noble

Repository Area Version
base main 1.25.0-1ubuntu2
updates main 1.25.0-1ubuntu3.7

Changelog

Version: 1.25.0-1ubuntu3.7 2026-09-14 14:07:36 UTC

libinput (1.25.0-1ubuntu3.7) noble-security; urgency=medium

  * SECURITY UPDATE: Privilege escalation
    - debian/patches/libinput-device-group-sanitize-phys-before-printing-.patch:
      Libinput-device-group: sanitize phys before printing it
    - CVE-2026-50292

 -- John Breton Fri, 11 Sep 2026 18:21:50 -0400

CVE-2026-50292 In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root



About   -   Send Feedback to @ubuntu_updates