Red Hat Security AdvisoryRHSA-2012:1284
spice-gtk security update
Released 2012-09-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) spice-glib-0.11-11.el6_3.1, spice-gtk-0.11-11.el6_3.1, spice-gtk-python-0.11-11.el6_3.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) spice-glib-devel-0.11-11.el6_3.1, spice-gtk-0.11-11.el6_3.1, spice-gtk-devel-0.11-11.el6_3.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) spice-glib-0.11-11.el6_3.1, spice-gtk-0.11-11.el6_3.1, spice-gtk-python-0.11-11.el6_3.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) spice-glib-devel-0.11-11.el6_3.1, spice-gtk-0.11-11.el6_3.1, spice-gtk-devel-0.11-11.el6_3.1 +1
- Red Hat Enterprise Linux Server (v. 6) spice-glib-0.11-11.el6_3.1, spice-gtk-0.11-11.el6_3.1, spice-gtk-python-0.11-11.el6_3.1
- Red Hat Enterprise Linux Server Optional (v. 6) spice-glib-devel-0.11-11.el6_3.1, spice-gtk-0.11-11.el6_3.1, spice-gtk-devel-0.11-11.el6_3.1 +1
- Red Hat Enterprise Linux Workstation (v. 6) spice-glib-0.11-11.el6_3.1, spice-gtk-0.11-11.el6_3.1, spice-gtk-python-0.11-11.el6_3.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) spice-glib-devel-0.11-11.el6_3.1, spice-gtk-0.11-11.el6_3.1, spice-gtk-devel-0.11-11.el6_3.1 +1
Fixes 1 record
Priority LOW 33
libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01093 · Published 2012-09-18 · Fixed CWE-264
