Comment 11 for bug 1393479

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package kde-runtime - 4:4.13.3-0ubuntu0.2

---------------
kde-runtime (4:4.13.3-0ubuntu0.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Insufficient Input Validation By IO Slaves and
    Webkit Part
   - Add upstream_CVE-2014-8600.diff to escape protocol twice: once
     for i18n, and once for HTML
   - https://www.kde.org/info/security/advisory-20141113-1.txt
   - CVE-2014-8600
   - LP: #1393479
 -- Jonathan Riddell <email address hidden> Thu, 20 Nov 2014 15:36:39 +0100