[Bug 1233374] Re: can not select language-selector-common and language-selector-gnome in Update Manager

[benditoelqueviene]

I've checked the changes report in the un-checkable update and it shows:

"SECURITY UPDATE: possible privilege escalation via policykit UID lookup race.
- dbus_backend/ls-dbus-backend: pass system-bus-name as a subject instead of pid so policykit can get the information from the system bus."

It is confirmed in the National Vulnerability Database at
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-1066, it links
to a bug for the update, not for the package to be updated:

https://launchpad.net/ubuntu/+source/language-selector/0.79.4

This information starts with this link in the "Changes" tab for the
update:

https://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-1066 (CVE-2013-1066)

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2013-1066

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to language-selector in Ubuntu.
https://bugs.launchpad.net/bugs/1233374

Title:
  can not select language-selector-common and language-selector-gnome in
  Update Manager

Status in “language-selector” package in Ubuntu:
  Invalid

Bug description:
  I tried to update the system (Ubuntu 12.04 LTS "precise") with the
  Update Manager.  It shows 2 _important security updates_ for language-
  selector-common (0.79.4) and language-selector-gnome (0.79.4), but
  they can't be selected.  They should be, as any package in Update
  Manager and as I had done a lot of times.

  I check in Synaptic and found the two packages marked with an ! symbol
  in gray; I don't know what it means.  The installed version is 0.79,
  for both packages.  I mark them for update, and Synaptic asks to mark
  for delete language-selector-gnome, ubuntu-desktop and ubuntu-
  standard.  I don't know if I should delete them or do something
  different.

  -  If I try to update language-selector-gnome first, it asks to delete
  ubuntu-desktop.

  -  If I try to apply the changes, Synaptics shows a message saying
  that it can not update because it has language-selector-commons as an
  unsolvable dependency (it needs language-selector-common 0.79.4).

  What should I do?  Leave it without updating?  If update, which would
  be the correct order in the process? ("first delete this package, then
  update the other, then reinstall a third" or something like that).  Is
  the bug in Update Manager, instead?

  Thanks in advance.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/language-selector/+bug/1233374/+subscriptions