[ubuntu/jaunty-security] kdebase-workspace_4.2.2-0ubuntu2.1_powerpc_translations.tar.gz, kdebase-workspace_4.2.2-0ubuntu2.1_ia64_translations.tar.gz, kdebase-workspace_4.2.2-0ubuntu2.1_lpia_translations.tar.gz, kdebase-workspace_4.2.2-0ubuntu2.1_sparc_translations.tar.gz (delayed), kdebase-workspace_4.2.2-0ubuntu2.1_i386_translations.tar.gz, kdebase-workspace_4.2.2-0ubuntu2.1_amd64_translations.tar.gz, kdebase-workspace 4:4.2.2-0ubuntu2.1 (Accepted)

Ubuntu Installer archive at ubuntu.com
Mon Apr 19 23:04:49 BST 2010


kdebase-workspace (4:4.2.2-0ubuntu2.1) jaunty-security; urgency=low

  * SECURITY UPDATE: KDM Local Privilege Escalation Vulnerability (LP: #562440).
   - Add debian/patches/CVE-2010-0436_fix_kdm_local_exploit.diff
   - kdm/backend/ctrl.c: prevent race condition during user login which could
     allow execution of arbitrary code as root
   - CVE-2010-0436
   - http://www.kde.org/info/security/advisory-20100413-1.txt

Date: Fri, 16 Apr 2010 19:16:35 +0100
Changed-By: Jonathan Riddell <jriddell at ubuntu.com>
Maintainer: Kubuntu Developers <kubuntu-devel at lists.ubuntu.com>
https://launchpad.net/ubuntu/jaunty/+source/kdebase-workspace/4:4.2.2-0ubuntu2.1
-------------- next part --------------
Format: 1.8
Date: Fri, 16 Apr 2010 19:16:35 +0100
Source: kdebase-workspace
Binary: kdebase-workspace kdebase-workspace-bin kdebase-workspace-libs4+5 kdebase-workspace-data kdebase-workspace-wallpapers kdebase-workspace-dev kdm klipper ksysguardd ksysguard kde-window-manager libkdecorations4 libkwineffects1 systemsettings kdebase-workspace-dbg kwin python-plasma
Architecture: source
Version: 4:4.2.2-0ubuntu2.1
Distribution: jaunty-security
Urgency: low
Maintainer: Kubuntu Developers <kubuntu-devel at lists.ubuntu.com>
Changed-By: Jonathan Riddell <jriddell at ubuntu.com>
Description: 
 kde-window-manager - the KDE 4 window manager (KWin)
 kdebase-workspace - base workspace components from the official KDE 4 release
 kdebase-workspace-bin - core binaries for the KDE 4 base workspace module
 kdebase-workspace-data - shared data files for the KDE 4 base workspace module
 kdebase-workspace-dbg - debugging symbols for the KDE 4 base workspace module
 kdebase-workspace-dev - development files for the KDE 4 base workspace module
 kdebase-workspace-libs4+5 - libraries provided by the KDE 4 base workspace module
 kdebase-workspace-wallpapers - extra wallpapers from the KDE 4 base module
 kdm        - KDE Display Manager for X11
 klipper    - clipboard utility for KDE 4
 ksysguard  - System Guard for KDE 4
 ksysguardd - System Guard Daemon for KDE 4
 kwin       - the KDE 4 window manager (KWin)
 libkdecorations4 - library used by decorations for the KDE 4 window manager
 libkwineffects1 - library used by effects for the KDE 4 window manager
 python-plasma - python support libraries for plasma applets
 systemsettings - KDE 4 System Settings
Launchpad-Bugs-Fixed: 562440
Changes: 
 kdebase-workspace (4:4.2.2-0ubuntu2.1) jaunty-security; urgency=low
 .
   * SECURITY UPDATE: KDM Local Privilege Escalation Vulnerability (LP: #562440).
    - Add debian/patches/CVE-2010-0436_fix_kdm_local_exploit.diff
    - kdm/backend/ctrl.c: prevent race condition during user login which could
      allow execution of arbitrary code as root
    - CVE-2010-0436
    - http://www.kde.org/info/security/advisory-20100413-1.txt
Checksums-Sha1: 
 a94b0d63f03a9714b3f63815f59d2ddd9fa1a779 2663 kdebase-workspace_4.2.2-0ubuntu2.1.dsc
 ece4d9029600f5e84e7cba95c92918f24c85be9b 143650 kdebase-workspace_4.2.2-0ubuntu2.1.diff.gz
Checksums-Sha256: 
 8da9485fdb63a984bc1ad7037f982b5810d705799e911da2c08d60a779a2ebfd 2663 kdebase-workspace_4.2.2-0ubuntu2.1.dsc
 e6004fd064bd1b14824eb2592c6880b21ea59a45e8d9b645fbcc62bade2c20ba 143650 kdebase-workspace_4.2.2-0ubuntu2.1.diff.gz
Files: 
 019a27939b9deb26721b11c506386879 2663 kde optional kdebase-workspace_4.2.2-0ubuntu2.1.dsc
 e8a8a5cf5cf1dacd2956739c0c9f1065 143650 kde optional kdebase-workspace_4.2.2-0ubuntu2.1.diff.gz
Original-Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde at lists.debian.org>


More information about the Jaunty-changes mailing list