libinput and libevdev bug fix and enhancement update
Summary
ALBA-2021:4219: libinput and libevdev bug fix and enhancement update. Affects libevdev versions < 1.10.0-1.el8. Fixed in 1.10.0-1.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
libinput and libevdev are libraries used for handling input devices in Linux systems. libinput provides a high-level interface for input devices such as keyboards, mice, and touchpads, while libevdev is a low-level library for handling input events. These libraries are commonly used in various Linux distributions, including AlmaLinux 8.
Vulnerability Detail
The vulnerability addressed in this update is not explicitly mentioned in the provided information. However, it is described as a bug fix and enhancement update, indicating that it addresses known issues and improves the functionality of libinput and libevdev. It is important to keep these libraries up to date to ensure the stability and security of input device handling in Linux systems.
How To Fix
Minimum fixed version
1.10.0-1.el8
This is the first release that contains the fix.
sudo dnf update libevdevTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Keeping the libinput and libevdev packages up to date is crucial for maintaining the stability and security of input device handling in Linux systems. It is recommended to update the affected packages to the fixed versions mentioned in the advisory. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for libevdev →
FAQ
libinput and libevdev are libraries used for handling input devices in Linux systems. libinput provides a high-level interface for input devices such as keyboards, mice, and touchpads, while libevdev is a low-level library for handling input events.
The impact of this vulnerability is not explicitly mentioned in the provided information. However, keeping the affected packages up to date is important to ensure the stability and security of input device handling in Linux systems.
To fix this vulnerability, you should update the affected packages to the fixed versions. For AlmaLinux 8, the fixed versions are libevdev 1.10.0-1.el8, libevdev-devel 1.10.0-1.el8, libinput 1.16.3-2.el8, libinput-devel 1.16.3-2.el8, and libinput-utils 1.16.3-2.el8. You can update these packages using the package manager of your Linux distribution.
No specific workarounds are mentioned in the provided information. It is recommended to update the affected packages to the fixed versions.
You can find more information about this vulnerability in the AlmaLinux Release Notes linked from the References section of the advisory.
References
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
