Advisory ROSA-SA-2023-2317

Software: libinput 1.16.3
OS: ROSA Virtualization 2.1

package_evr_string: libinput-1.16.3-3.rv3.src.rpm

CVE-ID: CVE-2022-1215
BDU-ID: 2022-02695
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the evdev_log_msg function of the libinput library’s libinput implementation of the X.Org and Wayland display server protocols is related to the use of uncontrolled format strings. Exploitation of the vulnerability could allow an attacker to execute arbitrary code with elevated privileges
CVE-STATUS: Fixed
CVE-REV: To close, run the yum update libinput command