| Package(s): | spice-gtk |
CVE #(s): | CVE-2013-4324
|
| Created: | September 20, 2013 |
Updated: | September 27, 2013 |
| Description: |
From the Red Hat advisory:
spice-gtk communicated with PolicyKit for authorization via an API that is
vulnerable to a race condition. This could lead to intended PolicyKit
authorizations being bypassed. This update modifies spice-gtk to
communicate with PolicyKit via a different API that is not vulnerable to
the race condition. |
| Alerts: |
|
( Log in to post comments)
|
|