spice-gtk: authorization bypass
| Package(s): | spice-gtk | CVE #(s): | CVE-2013-4324 | ||||||||||||||||||||||||||||||||||||
| Created: | September 20, 2013 | Updated: | January 1, 2014 | ||||||||||||||||||||||||||||||||||||
| Description: | From the Red Hat advisory:
spice-gtk communicated with PolicyKit for authorization via an API that is vulnerable to a race condition. This could lead to intended PolicyKit authorizations being bypassed. This update modifies spice-gtk to communicate with PolicyKit via a different API that is not vulnerable to the race condition. | ||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||