kde4libs (4:4.13.3-0ubuntu0.5) trusty-security; urgency=medium
* SECURITY UPDATE: privilege escalation in DBus auth backend
- debian/patches/CVE-2017-8422.patch: verify caller in
kdecore/auth/AuthBackend.cpp, kdecore/auth/AuthBackend.h,
kdecore/auth/backends/dbus/DBusHelperProxy.cpp,
kdecore/auth/backends/dbus/DBusHelperProxy.h,
kdecore/auth/backends/policykit/PolicyKitBackend.cpp,
kdecore/auth/backends/policykit/PolicyKitBackend.h,
kdecore/auth/backends/polkit-1/Polkit1Backend.cpp,
kdecore/auth/backends/polkit-1/Polkit1Backend.h.
- CVE-2017-8422
Date: 2017-05-11 16:14:14.498887+00:00
Changed-By: Marc Deslauriers <[email protected]>
Maintainer: Kubuntu Members <[email protected]>
https://launchpad.net/ubuntu/+source/kde4libs/4:4.13.3-0ubuntu0.5
Sorry, changesfile not available.
--
Trusty-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/trusty-changes