CentOS 6 : spice-gtk / spice-server (CESA-2018:2732)

An update for spice-gtk and spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CentOS 7 : spice / spice-gtk (CESA-2018:2731)

An update for spice and spice-gtk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

spice security update

CentOS Errata and Security Advisory CESA-2018:2731 An update for spice and spice-gtk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...

spice security update

CentOS Errata and Security Advisory CESA-2018:2732 An update for spice-gtk and spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...

Scientific Linux Security Update : spice and spice-gtk on SL7.x x86_64 (20180920)

The spice-gtk packages provide a GIMP Toolkit GTK+ widget for Simple Protocol for Independent Computing Environments SPICE clients. Both Virtual Machine Manager and Virtual Machine Viewer can make use of this widget to access virtual machines using the SPICE protocol. Security Fixes : - spice:...

Oracle Linux 6 : spice-gtk / and / spice-server (ELSA-2018-2732)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2732 advisory. spice-gtk 0.26-8.1 - Fix flexible array buffer overflow Resolves: rhbz1596008 spice-server 0.12.4-16.1 - Fix flexible array buffer overflow Resolves: rhbz159600...

Scientific Linux Security Update : spice-gtk and spice-server on SL6.x i386/x86_64 (20180920)

The spice-gtk packages provide a GIMP Toolkit GTK+ widget for Simple Protocol for Independent Computing Environments SPICE clients. Both Virtual Machine Manager and Virtual Machine Viewer can make use of this widget to access virtual machines using the SPICE protocol. Security Fixes : - spice:...

Oracle Linux 7 : spice / and / spice-gtk (ELSA-2018-2731)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-2731 advisory. spice 0.14.0-2.0.2 - add arm suppport 0.14.0-2.5 - Fix flexible array buffer overflow Resolves: rhbz1596008 spice-gtk 0.34-3.2 - Fix flexible array buffer...

RHEL 6 : spice-gtk and spice-server (RHSA-2018:2732)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2732 advisory. The Simple Protocol for Independent Computing Environments SPICE is a remote display protocol for virtual environments. SPICE users can access a...

RHEL 7 : spice and spice-gtk (RHSA-2018:2731)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2731 advisory. The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows the user to...

Important: Red Hat Security Advisory: spice and spice-gtk security update

An update for spice and spice-gtk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service

A vulnerability was discovered in SPICE where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts...

spice: Missing check in demarshal.py:write_validate_array_item() allows for buffer overflow and denial of service

A vulnerability was discovered in SPICE where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or, potentially, other impacts...

Important: Red Hat Security Advisory: spice-gtk and spice-server security update

An update for spice-gtk and spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

spice and spice-gtk security update

spice 0.14.0-2.0.2 - add arm suppport 0.14.0-2.5 - Fix flexible array buffer overflow Resolves: rhbz1596008 spice-gtk 0.34-3.2 - Fix flexible array buffer overflow Resolves: rhbz1596008...

spice-gtk and spice-server security update

spice-gtk 0.26-8.1 - Fix flexible array buffer overflow Resolves: rhbz1596008 spice-server 0.12.4-16.1 - Fix flexible array buffer overflow Resolves: rhbz1596008...

openSUSE Security Update : spice-gtk (openSUSE-2018-1015)

This update for spice-gtk fixes the following issues : Security issues fixed : - CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 Other bugs fixed : - Add setuid bit to spice-client-glib-usb-acl-helpe...

Security update for spice-gtk (important)

This update for spice-gtk fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 Other bugs fixed: - Add setuid bit to spice-client-glib-usb-acl-helper...

SUSE-SU-2018:2709-1 Security update for spice-gtk

This update for spice-gtk fixes the following issues: Security issues fixed: - CVE-2018-10873: Fix potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Avoid buffer overflow on image lz checks bsc1101295 Other bugs fixed: - Add setuid bit to spice-client-glib-usb-acl-helper...

Red Hat spice-client buffer overflow vulnerability

Red Hat SPICE is an enterprise virtualized desktop version of Red Hat's adaptive telepresence open-source protocol, which is used to connect users to their virtual desktops, providing the same end-user experience as a physical desktop. spice-client is its client program. A buffer overflow...