Lucene search
RedHatRHSA-2013:1273HistorySep 19, 2013 - 12:00 a.m.
(RHSA-2013:1273) Important: spice-gtk security update
2013-09-1900:00:00
access.redhat.com
105
EPSS
0
Percentile
5.1%
The spice-gtk packages provide a GIMP Toolkit (GTK+) widget for SPICE
(Simple Protocol for Independent Computing Environments) clients. Both
Virtual Machine Manager and Virtual Machine Viewer can make use of this
widget to access virtual machines using the SPICE protocol.
spice-gtk communicated with PolicyKit for authorization via an API that is
vulnerable to a race condition. This could lead to intended PolicyKit
authorizations being bypassed. This update modifies spice-gtk to
communicate with PolicyKit via a different API that is not vulnerable to
the race condition. (CVE-2013-4324)
All users of spice-gtk are advised to upgrade to these updated packages,
which contain a backported patch to correct this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | src | spice-gtk | < 0.14-7.el6_4.3 | spice-gtk-0.14-7.el6_4.3.src.rpm |
| RedHat | 6 | i686 | spice-gtk-python | < 0.14-7.el6_4.3 | spice-gtk-python-0.14-7.el6_4.3.i686.rpm |
| RedHat | 6 | x86_64 | spice-gtk-debuginfo | < 0.14-7.el6_4.3 | spice-gtk-debuginfo-0.14-7.el6_4.3.x86_64.rpm |
| RedHat | 6 | x86_64 | spice-gtk-devel | < 0.14-7.el6_4.3 | spice-gtk-devel-0.14-7.el6_4.3.x86_64.rpm |
| RedHat | 6 | x86_64 | spice-gtk-python | < 0.14-7.el6_4.3 | spice-gtk-python-0.14-7.el6_4.3.x86_64.rpm |
| RedHat | 6 | x86_64 | spice-glib-devel | < 0.14-7.el6_4.3 | spice-glib-devel-0.14-7.el6_4.3.x86_64.rpm |
| RedHat | 6 | i686 | spice-gtk | < 0.14-7.el6_4.3 | spice-gtk-0.14-7.el6_4.3.i686.rpm |
| RedHat | 6 | i686 | spice-gtk-tools | < 0.14-7.el6_4.3 | spice-gtk-tools-0.14-7.el6_4.3.i686.rpm |
| RedHat | 6 | x86_64 | spice-gtk | < 0.14-7.el6_4.3 | spice-gtk-0.14-7.el6_4.3.x86_64.rpm |
| RedHat | 6 | i686 | spice-glib | < 0.14-7.el6_4.3 | spice-glib-0.14-7.el6_4.3.i686.rpm |
Related
openvas
openvas
RedHat Update for spice-gtk RHSA-2013:1273-01
2013-09-24 00:00:00
Fedora Update for spice-gtk FEDORA-2013-17109
2013-10-03 00:00:00
Fedora Update for spice-gtk FEDORA-2013-17195
2013-12-23 00:00:00
centos
centos
spice security update
2013-09-20 02:25:25
fedora
fedora
[SECURITY] Fedora 18 Update: spice-gtk-0.18-3.fc18
2013-12-19 07:19:49
[SECURITY] Fedora 19 Update: spice-gtk-0.20-6.fc19
2013-09-27 00:45:25
nessus
nessus
CentOS 6 : spice-gtk (CESA-2013:1273)
2013-09-20 00:00:00
Oracle Linux 6 : spice-gtk (ELSA-2013-1273)
2013-09-20 00:00:00
Fedora 19 : spice-gtk-0.20-6.fc19 (2013-17109)
2013-09-27 00:00:00
oraclelinux
oraclelinux
spice-gtk security update
2013-09-19 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 08:59:36
ibm
ibm
ubuntucve
ubuntucve
CVE-2013-4324
2013-10-03 00:00:00
nvd
nvd
CVE-2013-4324
2013-10-03 21:55:04
cvelist
cvelist
CVE-2013-4324
2013-10-03 21:00:00
prion
prion
Race condition
2013-10-03 21:55:00
debiancve
debiancve
CVE-2013-4324
2013-10-03 21:55:04
cve
cve
CVE-2013-4324
2013-10-03 21:55:04
mageia
mageia
gentoo
gentoo
polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation
2014-06-26 00:00:00