Ubuntu
kdebase-workspace package

  1. Bug #562440
  2. Comment #10

Comment 10 for bug 562440

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package kdebase-workspace - 4:4.1.4-0ubuntu1~intrepid3.2

---------------
kdebase-workspace (4:4.1.4-0ubuntu1~intrepid3.2) intrepid-security; urgency=low

  * SECURITY UPDATE: KDM Local Privilege Escalation Vulnerability (LP: #562440).
   - Add debian/patches/CVE-2010-0436_fix_kdm_local_exploit.diff
   - kdm/backend/ctrl.c: prevent race condition during user login which could
     allow execution of arbitrary code as root
   - CVE-2010-0436
   - http://www.kde.org/info/security/advisory-20100413-1.txt
 -- Jonathan Riddell <email address hidden> Fri, 16 Apr 2010 19:19:37 +0100