USN-6843-1: Plasma Workspace vulnerability
26 June 2024
plasma-workspace would allow unintended access to the session manager.
Releases
Packages
- plasma-workspace - Plasma Workspace for KF5
Details
Fabian Vogt discovered that Plasma Workspace incorrectly handled
connections via ICE. A local attacker could possibly use this issue to
gain access to another user's session manager and execute arbitrary code.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 24.04
Ubuntu 23.10
Ubuntu 22.04
Ubuntu 20.04
After a standard system update you need to reboot your computer to make all
the necessary changes.