A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious

The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.

spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function,

libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain priv