EulerOS 2.0 SP3 : spice (EulerOS-SA-2021-1121)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...

Huawei EulerOS: Security Advisory for spice (EulerOS-SA-2021-1121)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for spice-gtk (EulerOS-SA-2021-1122)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2524-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2524-1 : spice-vdagent security update

Several vulnerabilities were discovered in spice-vdagent, a spice guest agent for enchancing SPICE integeration and experience. CVE-2017-15108 spice-vdagent does not properly escape save directory before passing to shell, allowing local attacker with access to the session the agent runs in to...

[SECURITY] [DLA 2524-1] spice-vdagent security update

Debian LTS Advisory DLA-2524-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA January 13, 2021 https://wiki.debian.org/LTS Package : spice-vdagent Version : 0.17.0-1+deb9u1 CVE ID : CVE-2017-15108 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 Debian Bug...

DLA-2524-1 spice-vdagent - security update

Bulletin has no description...

Huawei EulerOS: Security Advisory for spice (EulerOS-SA-2021-1052)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated spice-vdagent package fixes security vulnerabilities

Matthias Gerstner discovered that SPICE vdagent incorrectly handled the activexfers hash table. A local attacker could possibly use this issue to cause SPICE vdagent to consume memory, resulting in a denial of service CVE-2020-25650. Matthias Gerstner discovered that SPICE vdagent incorrectly...

MGASA-2020-0474 Updated spice-vdagent package fixes security vulnerabilities

Matthias Gerstner discovered that SPICE vdagent incorrectly handled the activexfers hash table. A local attacker could possibly use this issue to cause SPICE vdagent to consume memory, resulting in a denial of service CVE-2020-25650. Matthias Gerstner discovered that SPICE vdagent incorrectly...

Virtuozzo 6 : spice-server / spice-server-devel (VZLSA-2019-0232)

An update for spice-server is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

SUSE SLES12 Security Update : spice (SUSE-SU-2020:3842-1)

This update for spice fixes the following issues : CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295 Note that Tenable Network Security has extracted the preceding description block directly from t...

SUSE SLES12 Security Update : spice-gtk (SUSE-SU-2020:3841-1)

This update for spice-gtk fixes the following issues : CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295 Note that Tenable Network Security has extracted the preceding description block directly fr...

SUSE-SU-2020:3842-1 Security update for spice

This update for spice fixes the following issues: - CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295...

SUSE-SU-2020:3841-1 Security update for spice-gtk

This update for spice-gtk fixes the following issues: - CVE-2018-10873: Fixed a potential heap corruption when demarshalling bsc1104448 - CVE-2018-10893: Fixed a buffer overflow on image lz checks bsc1101295...

[SECURITY] Fedora 32 Update: spice-gtk-0.39-1.fc32

Client libraries for SPICE desktop servers...

[SECURITY] Fedora 33 Update: spice-gtk-0.39-1.fc33

Client libraries for SPICE desktop servers...

Fedora 32 : spice-gtk (2020-5567866bb0)

Update to v0.39 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. T...

Fedora: Security Advisory for spice-gtk (FEDORA-2020-5567866bb0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for spice-gtk (FEDORA-2020-79a7a31fea)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...