[CVE-2010-0436] KDM Local Privilege Escalation Vulnerability

This bug was fixed in the package kdebase-workspace - 4:4.4.2-0ubuntu12

---------------
kdebase-workspace (4:4.4.2-0ubuntu12) lucid; urgency=low

  [ Jonathan Thomas ]
  * Add CVE-2010-0436_fix_kdm_local_exploit.diff from upstream to fix a local
    KDM vulnerability (LP: #562440)

  [ Felix Geyer ]
  * Add kubuntu_119_powerdevil_fix_suspend_twice.diff, fixes PowerDevil
    suspending twice when system is idle.
    http://bugs.kde.org/221637
  * Add kubuntu_120_powerdevil_reset_status_after_idle.diff, fixes PowerDevil
    only suspending once per session.
    http://bugs.kde.org/221648
 -- Jonathan Thomas <email address hidden> Tue, 13 Apr 2010 13:44:39 -0400

Good :) But how about 8.10, 9.04 and 9.10?

See the patches right above your comment? Just waiting for the security team to upload those.

This bug was fixed in the package kdebase-workspace - 4:4.3.2-0ubuntu7.2

---------------
kdebase-workspace (4:4.3.2-0ubuntu7.2) karmic-security; urgency=low

  * SECURITY UPDATE: KDM Local Privilege Escalation Vulnerability (LP: #562440).
   - Add debian/patches/CVE-2010-0436_fix_kdm_local_exploit.diff
   - kdm/backend/ctrl.c: prevent race condition during user login which could
     allow execution of arbitrary code as root
   - CVE-2010-0436
   - http://www.kde.org/info/security/advisory-20100413-1.txt
 -- Jonathan Riddell <email address hidden> Fri, 16 Apr 2010 19:00:37 +0100

This bug was fixed in the package kdebase-workspace - 4:4.2.2-0ubuntu2.1

---------------
kdebase-workspace (4:4.2.2-0ubuntu2.1) jaunty-security; urgency=low

  * SECURITY UPDATE: KDM Local Privilege Escalation Vulnerability (LP: #562440).
   - Add debian/patches/CVE-2010-0436_fix_kdm_local_exploit.diff
   - kdm/backend/ctrl.c: prevent race condition during user login which could
     allow execution of arbitrary code as root
   - CVE-2010-0436
   - http://www.kde.org/info/security/advisory-20100413-1.txt
 -- Jonathan Riddell <email address hidden> Fri, 16 Apr 2010 19:16:35 +0100

This bug was fixed in the package kdebase-workspace - 4:4.1.4-0ubuntu1~intrepid3.2

---------------
kdebase-workspace (4:4.1.4-0ubuntu1~intrepid3.2) intrepid-security; urgency=low

  * SECURITY UPDATE: KDM Local Privilege Escalation Vulnerability (LP: #562440).
   - Add debian/patches/CVE-2010-0436_fix_kdm_local_exploit.diff
   - kdm/backend/ctrl.c: prevent race condition during user login which could
     allow execution of arbitrary code as root
   - CVE-2010-0436
   - http://www.kde.org/info/security/advisory-20100413-1.txt
 -- Jonathan Riddell <email address hidden> Fri, 16 Apr 2010 19:19:37 +0100