LWN.net Logo

Fedora alert FEDORA-2013-17109 (spice-gtk)

From:  updates@fedoraproject.org
To:  package-announce@lists.fedoraproject.org
Subject:  [SECURITY] Fedora 19 Update: spice-gtk-0.20-6.fc19
Date:  Fri, 27 Sep 2013 00:45:25 +0000
Message-ID:  <20130927004525.5774D21E14@bastion01.phx2.fedoraproject.org>
Archive-link:  Article, Thread

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2013-17109 2013-09-19 00:56:34 -------------------------------------------------------------------------------- Name : spice-gtk Product : Fedora 19 Version : 0.20 Release : 6.fc19 URL : http://spice-space.org/page/Spice-Gtk Summary : A GTK+ widget for SPICE clients Description : Client libraries for SPICE desktop servers. -------------------------------------------------------------------------------- Update Information: Fix CVE-2013-4324 Insecure calling of polkit via polkit_unix_process_new() Add a few upstream patches fixing bugs in spice-gtk 0.20 -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 18 2013 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.20-6 - Fix CVE-2013-4324 Insecure calling of polkit via polkit_unix_process_new() (rhbz#1009540) * Fri Sep 13 2013 Hans de Goede <hdegoede@redhat.com> - 0.20-5 - Fix the spice-client-glib-usb-acl-helper no longer being suid root * Fri Sep 13 2013 Christophe Fergeau <cfergeau@redhat.com> 0.20-4 - Add misc upstream patches fixing various 0.20 bugs * Wed Aug 28 2013 Alon Levy <alevy@redhat.com> - 0.20-3 - Fix wrong mono cursor local rendering (rhbz#998529) * Sun Aug 4 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.20-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Sat Jul 6 2013 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.20-2 - Fix spice_channel_string_to_type symbol visibility (rhbz#981815) * Wed Jun 26 2013 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.20-1 - Update to spice-gtk 0.20 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1006669 - CVE-2013-4324 spice-gtk: Insecure calling of polkit via polkit_unix_process_new() https://bugzilla.redhat.com/show_bug.cgi?id=1006669 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update spice-gtk' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds