Ubuntu Security Notice 2402-1 – David Edmundson discovered that the KDE Clock KCM policykit helper did not properly guard against untrusted input. Under certain circumstances, a process running under the user’s session could exploit this to run programs as the administrator.