[SECURITY] Fedora 18 Update: spice-protocol-0.12.1-1.fc18

Header files describing the spice protocol and the para-virtual graphics card QXL...

[SECURITY] Fedora 18 Update: spice-0.11.3-1.fc18

The Simple Protocol for Independent Computing Environments SPICE is a remote display system built for virtual environments which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine...

[SECURITY] Fedora 18 Update: virt-viewer-0.5.3-6.fc18

Virtual Machine Viewer provides a graphical console client for connecting to virtual machines. It uses the GTK-VNC or SPICE-GTK widgets to provide the display, and libvirt for looking up VNC/SPICE server details...

[SECURITY] Fedora 18 Update: spice-gtk-0.13.29-4.fc18

Client libraries for SPICE desktop servers...

spice security update

CentOS Errata and Security Advisory CESA-2012:1284 Updated spice-gtk packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

spice-gtk/glib: Possible privilege escalation via un-sanitized environment variable

libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: it could be argued that this is a vulnerability in the applications that do...

Moderate: Red Hat Security Advisory: spice-gtk security update

Updated spice-gtk packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

spice-gtk security update

0.11-11.el63.1 - Fix version for Z-stream Related: rhbz854823 0.11-12 - Add patch fixing CVE-2012-3524 Resolves: rhbz854823...

Scientific Linux Security Update : qspice-client on SL5.x i386/x86_64

The qspice-client package provides the client side of the SPICE protocol. A race condition was found in the way the SPICE Mozilla Firefox plug-in and the SPICE client communicated. A local attacker could use this flaw to trick the plug-in and the SPICE client into communicating over an...

Scientific Linux Security Update : spice-xpi on SL5.x,SL6.x i386/x86_64

An uninitialized pointer use flaw was found in the SPICE Firefox plug-in. If a user were tricked into visiting a malicious web page with Firefox while the SPICE plug-in was enabled, it could cause Firefox to crash or, possibly, execute arbitrary code with the privileges of the user running Firefo...

Scientific Linux Security Update : spice-xpi on SL5.x i386/x86_64

The spice-xpi package provides a plug-in that allows the SPICE client to run from within Mozilla Firefox. A race condition was found in the way the SPICE Firefox plug-in and the SPICE client communicated. A local attacker could use this flaw to trick the plug-in and the SPICE client into...

CentOS Update for spice-xpi CESA-2011:0427 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for spice-xpi CESA-2011:0427 centos5 x86_64

Check for the Version of spice-xpi OpenVAS Vulnerability Test CentOS Update for spice-xpi CESA-2011:0427 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

libvirt security, bug fix, and enhancement update

libvirt-0.9.10-21.0.1.el6 - Replace docs/et.png in tarball with blank image libvirt-0.9.10-21.el6 - qemu: Rollback on used USB devices rhbz743671 - qemu: Dont delete USB device on failed qemuPrepareHostdevUSBDevices rhbz743671 - Revert 'rpc: Discard non-blocking calls only when necessary'...

RedHat Update for spice-xpi RHSA-2011:0426-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for spice-xpi RHSA-2011:0426-01

Check for the Version of spice-xpi OpenVAS Vulnerability Test RedHat Update for spice-xpi RHSA-2011:0426-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for spice-xpi CESA-2011:0427 centos5 i386

Check for the Version of spice-xpi OpenVAS Vulnerability Test CentOS Update for spice-xpi CESA-2011:0427 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS Update for spice-xpi CESA-2011:0427 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1179

The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 plugin/nsScriptablePeer.cpp and 2 plugin/plugin.cpp, which trigger multiple uses of an uninitializ...

Code injection

The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...