[Bug 1393479] Re: security: Insufficient Input Validation By IO Slaves and Webkit Part

Launchpad Bug Tracker 1393479 at bugs.launchpad.net
Thu Nov 20 14:37:11 UTC 2014


This bug was fixed in the package kio-extras - 4:5.1.1-0ubuntu2

---------------
kio-extras (4:5.1.1-0ubuntu2) vivid; urgency=medium

  * SECURITY UPDATE: Insufficient Input Validation By IO Slaves and
    Webkit Part
   - Add upstream_CVE-2014-8600.diff to escape protocol twice: once
     for i18n, and once for HTML
   - https://www.kde.org/info/security/advisory-20141113-1.txt
   - CVE-2014-8600
   - LP: #1393479
 -- Jonathan Riddell <jriddell at ubuntu.com>   Tue, 18 Nov 2014 10:08:55 +0100

** Changed in: kio-extras (Ubuntu Vivid)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to kde-runtime in Ubuntu.
https://bugs.launchpad.net/bugs/1393479

Title:
  security: Insufficient Input Validation By IO Slaves and Webkit Part

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kde-runtime/+bug/1393479/+subscriptions




More information about the kubuntu-bugs mailing list