Red Hat Security AdvisoryRHSA-2013:1273
spice-gtk security update
Released 2013-09-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) spice-glib-0.14-7.el6_4.3, spice-gtk-0.14-7.el6_4.3, spice-gtk-python-0.14-7.el6_4.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) spice-glib-devel-0.14-7.el6_4.3, spice-gtk-0.14-7.el6_4.3, spice-gtk-devel-0.14-7.el6_4.3 +1
- Red Hat Enterprise Linux HPC Node (v. 6) spice-glib-0.14-7.el6_4.3, spice-gtk-0.14-7.el6_4.3, spice-gtk-python-0.14-7.el6_4.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) spice-glib-devel-0.14-7.el6_4.3, spice-gtk-0.14-7.el6_4.3, spice-gtk-devel-0.14-7.el6_4.3 +1
- Red Hat Enterprise Linux Server (v. 6) spice-glib-0.14-7.el6_4.3, spice-gtk-0.14-7.el6_4.3, spice-gtk-python-0.14-7.el6_4.3
- Red Hat Enterprise Linux Server Optional (v. 6) spice-glib-devel-0.14-7.el6_4.3, spice-gtk-0.14-7.el6_4.3, spice-gtk-devel-0.14-7.el6_4.3 +1
- Red Hat Enterprise Linux Workstation (v. 6) spice-glib-0.14-7.el6_4.3, spice-gtk-0.14-7.el6_4.3, spice-gtk-python-0.14-7.el6_4.3
- Red Hat Enterprise Linux Workstation Optional (v. 6) spice-glib-devel-0.14-7.el6_4.3, spice-gtk-0.14-7.el6_4.3, spice-gtk-devel-0.14-7.el6_4.3 +1
Fixes 1 record
Priority LOW 21
spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended access restrictions by leveraging a PolkitUni…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00384 · Published 2013-10-03 · Fixed CWE-264
