I've checked the changes report in the un-checkable update and it shows: "SECURITY UPDATE: possible privilege escalation via policykit UID lookup race. - dbus_backend/ls-dbus-backend: pass system-bus-name as a subject instead of pid so policykit can get the information from the system bus."
It is confirmed in the National Vulnerability Database at https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1066, it links to a bug for the update, not for the package to be updated: https://launchpad.net/ubuntu/+source/language-selector/0.79.4 This information starts with this link in the "Changes" tab for the update: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-1066 (CVE-2013-1066) ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2013-1066 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to language-selector in Ubuntu. https://bugs.launchpad.net/bugs/1233374 Title: can not select language-selector-common and language-selector-gnome in Update Manager Status in “language-selector” package in Ubuntu: Invalid Bug description: I tried to update the system (Ubuntu 12.04 LTS "precise") with the Update Manager. It shows 2 _important security updates_ for language- selector-common (0.79.4) and language-selector-gnome (0.79.4), but they can't be selected. They should be, as any package in Update Manager and as I had done a lot of times. I check in Synaptic and found the two packages marked with an ! symbol in gray; I don't know what it means. The installed version is 0.79, for both packages. I mark them for update, and Synaptic asks to mark for delete language-selector-gnome, ubuntu-desktop and ubuntu- standard. I don't know if I should delete them or do something different. - If I try to update language-selector-gnome first, it asks to delete ubuntu-desktop. - If I try to apply the changes, Synaptics shows a message saying that it can not update because it has language-selector-commons as an unsolvable dependency (it needs language-selector-common 0.79.4). What should I do? Leave it without updating? If update, which would be the correct order in the process? ("first delete this package, then update the other, then reinstall a third" or something like that). Is the bug in Update Manager, instead? Thanks in advance. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1233374/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
