This bug was fixed in the package kio-extras - 4:5.1.1-0ubuntu2
---------------
kio-extras (4:5.1.1-0ubuntu2) vivid; urgency=medium
* SECURITY UPDATE: Insufficient Input Validation By IO Slaves and
Webkit Part
- Add upstream_CVE-2014-8600.diff to escape protocol twice: once
for i18n, and once for HTML
- https://www.kde.org/info/security/advisory-20141113-1.txt
- CVE-2014-8600
- LP: #1393479
-- Jonathan Riddell <[email protected]> Tue, 18 Nov 2014 10:08:55 +0100
** Changed in: kio-extras (Ubuntu Vivid)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1393479
Title:
security: Insufficient Input Validation By IO Slaves and Webkit Part
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kde-runtime/+bug/1393479/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
