Skip to content
OpenAdvisories
Unscored RHSA-2013:1273 1 CVE

Red Hat Security Advisory: spice-gtk security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client spice-glib 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::client spice-glib-devel 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::client spice-gtk 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::client spice-gtk-debuginfo 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::client spice-gtk-devel 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::client spice-gtk-python 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::client spice-gtk-tools 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-glib 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-glib-devel 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-gtk 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-gtk-debuginfo 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-gtk-devel 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-gtk-python 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::computenode spice-gtk-tools 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::server spice-glib 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::server spice-glib-devel 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::server spice-gtk 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::server spice-gtk-debuginfo 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::server spice-gtk-devel 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::server spice-gtk-python 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::server spice-gtk-tools 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-glib 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-glib-devel 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-gtk 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-gtk-debuginfo 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-gtk-devel 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-gtk-python 0:0.14-7.el6_4.3
Red Hat · RHEL 6 enterprise_linux:6::workstation spice-gtk-tools 0:0.14-7.el6_4.3

Vulnerabilities 1

  • Unscored —

    spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new AP…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1006669
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1273.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-4324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4324
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4324