A vulnerability in spice-gtk could allow an attacker to remotely execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/spice-gtk | * | < 0.34 | >= 0.34 |
spice-gtk is a set of GObject and Gtk objects for connecting to Spice servers and a client GUI.
A vulnerability was found in spice-gtk client due to the incorrect use of integer types and missing overflow checks.
An attacker, by enticing the user to join a malicious server, could remotely execute arbitrary code or cause a Denial of Service condition.
There is no known workaround at this time.
All spice-gtk users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/spice-gtk-0.34"
A vulnerability in spice-gtk could allow local attackers to gain escalated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-misc/spice-gtk | * | < 0.14 | >= 0.14 |
spice-gtk is a set of GObject and Gtk objects for connecting to Spice servers and a client GUI.
spice-gtk does not properly sanitize the DBUS_SYSTEM_BUS_ADDRESS environment variable.
A local attacker may be able to gain escalated privileges.
There is no known workaround at this time.
All spice-gtk users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/spice-gtk-0.14"
A race condition in polkit could allow a local attacker to gain escalated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/libvirt | * | < 1.1.2-r3 | >= 1.1.2-r3 |
| net-misc/spice-gtk | * | < 0.21 | >= 0.21 |
| net-print/hplip | * | < 3.14.1 | >= 3.14.1 |
| sys-apps/systemd | * | < 204-r1 | >= 204-r1 |
| sys-auth/polkit | * | < 0.112 | >= 0.112 |
polkit is a toolkit for managing policies relating to unprivileged processes communicating with privileged processes.
polkit has a race condition which potentially allows a process to change its UID/EUID via suid or pkexec before authentication is completed.
A local attacker could start a suid or pkexec process through a polkit-enabled application, which could result in privilege escalation or bypass of polkit restrictions.
There is no known workaround at this time.
All polkit users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-auth/polkit-0.112"
All HPLIP users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-print/hplip-3.14.1"
All Spice-Gtk users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-misc/spice-gtk-0.21"
All systemd users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/systemd-204-r1"
All libvirt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/libvirt-1.1.2-r3"