{"object_kind":"push","event_name":"push","before":"7c49e6112d5b109755e6b2685f1fbfbaa29ec9e6","after":"76f0d8a7f57e2868882864b4611281f12f704b55","ref":"refs/heads/main","ref_protected":false,"checkout_sha":"76f0d8a7f57e2868882864b4611281f12f704b55","message":null,"user_id":9716,"user_name":"Marge Bot","user_username":"marge-bot","user_email":"","user_avatar":"https://gitlab.freedesktop.org/uploads/-/system/user/avatar/9716/marge.png","project_id":147,"project":{"id":147,"name":"libinput","description":"Input device management and event handling library","web_url":"https://gitlab.freedesktop.org/libinput/libinput","avatar_url":null,"git_ssh_url":"git@ssh.gitlab.freedesktop.org:libinput/libinput.git","git_http_url":"https://gitlab.freedesktop.org/libinput/libinput.git","namespace":"libinput","visibility_level":20,"path_with_namespace":"libinput/libinput","default_branch":"main","ci_config_path":"","homepage":"https://gitlab.freedesktop.org/libinput/libinput","url":"git@ssh.gitlab.freedesktop.org:libinput/libinput.git","ssh_url":"git@ssh.gitlab.freedesktop.org:libinput/libinput.git","http_url":"https://gitlab.freedesktop.org/libinput/libinput.git"},"commits":[{"id":"76f0d8a7f57e2868882864b4611281f12f704b55","message":"libinput-device-group: sanitize phys before printing it\n\nA malicious uinput device could set the phys value (via UI_SET_PHYS)\nto contain a '\\n'. When the value is printed as part of the device group\nthe udev rules will interpret it as separate property.\n\nDepending on the property this can cause local privilege escalation.\n\nCloses #1296\n\nFound-by: Csome\nPart-of: <https://gitlab.freedesktop.org/libinput/libinput/-/merge_requests/1487>\n","title":"libinput-device-group: sanitize phys before printing it","timestamp":"2026-06-04T08:43:10+10:00","url":"https://gitlab.freedesktop.org/libinput/libinput/-/commit/76f0d8a7f57e2868882864b4611281f12f704b55","author":{"name":"Peter Hutterer","email":"peter.hutterer@who-t.net"},"added":[],"modified":["udev/libinput-device-group.c"],"removed":[]}],"total_commits_count":1,"push_options":{},"repository":{"name":"libinput","url":"git@ssh.gitlab.freedesktop.org:libinput/libinput.git","description":"Input device management and event handling library","homepage":"https://gitlab.freedesktop.org/libinput/libinput","git_http_url":"https://gitlab.freedesktop.org/libinput/libinput.git","git_ssh_url":"git@ssh.gitlab.freedesktop.org:libinput/libinput.git","visibility_level":20}}