USN-2402-1: KDE workspace vulnerability
11 November 2014
KDE workspace could be made to crash or run programs as an administrator.
Releases
Packages
- kde-workspace - KDE Plasma Workspace components
Details
David Edmundson discovered that the KDE Clock KCM policykit helper did not
properly guard against untrusted input. Under certain circumstances, a
process running under the user's session could exploit this to run
programs as the administrator.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.04
In general, a standard system update will make all the necessary changes.