[ubuntu/vivid-proposed] webkitkde 1.3.4-1ubuntu1 (Accepted)
Jonathan Riddell
jriddell at ubuntu.com
Mon Nov 17 16:51:14 UTC 2014
webkitkde (1.3.4-1ubuntu1) vivid; urgency=medium
* SECURITY UPDATE: Insufficient Input Validation By IO Slaves and
Webkit Part
- Add upstream_cve-2014-8600.diff to escape protocol twice: once
for i18n, and once for HTML
- https://www.kde.org/info/security/advisory-20141113-1.txt
- CVE-2014-8600
- LP: #1393479
Date: Mon, 17 Nov 2014 17:44:29 +0100
Changed-By: Jonathan Riddell <jriddell at ubuntu.com>
Maintainer: Kubuntu Developers <kubuntu-devel at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/webkitkde/1.3.4-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Mon, 17 Nov 2014 17:44:29 +0100
Source: webkitkde
Binary: kpart-webkit kpart-webkit-dbg
Architecture: source
Version: 1.3.4-1ubuntu1
Distribution: vivid
Urgency: medium
Maintainer: Kubuntu Developers <kubuntu-devel at lists.ubuntu.com>
Changed-By: Jonathan Riddell <jriddell at ubuntu.com>
Description:
kpart-webkit - WebKit KPart
kpart-webkit-dbg - WebKit KPart - debugging symbols
Launchpad-Bugs-Fixed: 1393479
Changes:
webkitkde (1.3.4-1ubuntu1) vivid; urgency=medium
.
* SECURITY UPDATE: Insufficient Input Validation By IO Slaves and
Webkit Part
- Add upstream_cve-2014-8600.diff to escape protocol twice: once
for i18n, and once for HTML
- https://www.kde.org/info/security/advisory-20141113-1.txt
- CVE-2014-8600
- LP: #1393479
Checksums-Sha1:
c768274da972e4ac0d260633581d112b52041a77 1614 webkitkde_1.3.4-1ubuntu1.dsc
60aac708b28f180955915eb236ede55789a5da62 6788 webkitkde_1.3.4-1ubuntu1.debian.tar.xz
Checksums-Sha256:
f3d315b98b7e5b63b1124cb784351a4daa6d7845eed03f86d76e14cc9287fe23 1614 webkitkde_1.3.4-1ubuntu1.dsc
203e00e928adf7a361d185f97bfb3efc163701da4f9d49713f229750c9a22a95 6788 webkitkde_1.3.4-1ubuntu1.debian.tar.xz
Files:
aea20781a06bd43463c1b533de7e926d 1614 web optional webkitkde_1.3.4-1ubuntu1.dsc
0145b18135f4671314c39c776474e3bb 6788 web optional webkitkde_1.3.4-1ubuntu1.debian.tar.xz
Original-Maintainer: Debian KDE Extras Team <pkg-kde-extras at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEARECAAYFAlRqJ2kACgkQpQbm1N1NUIjSvQCgsrLKn9vPzNGbDA3mhrie57nB
UYoAn0ENO7yPYID+q+KzfS2u0qijW7TO
=+DeA
-----END PGP SIGNATURE-----
More information about the Vivid-changes
mailing list