Ubuntu alert USN-8829-1 (plasma-workspace)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8829-1] Plasma Workspace vulnerability
Date:
             
 
Tue, 29 Sep 2026 16:07:52 +0000
Message-ID:
             
 
<E1xBaMy-0005IF-Se@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8829-1
September 28, 2026

plasma-workspace vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Plasma Workspace could allow unintended access to user sessions.

Software Description:
- plasma-workspace: Plasma Workspace for KF5

Details:

Fabian Vogt discovered that Plasma Workspace did not properly authenticate
local clients connecting to the session manager. A local attacker could
possibly use this issue to execute arbitrary code as another user.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  plasma-workspace                4:5.5.5.2-0ubuntu1.1+esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8829-1
  CVE-2024-36041


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=bNz6
-----END PGP SIGNATURE-----