UbuntuUpdates.org

Package "libspice-server1"

Name: libspice-server1

Description:

Implements the server side of the SPICE protocol
Latest version: 0.14.2-4ubuntu3.1
Release: focal (20.04)
Level: security
Repository: main
Head package: spice
Homepage: http://www.spice-space.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libspice-server1"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libspice-server1" in Focal

Repository Area Version
base main 0.14.2-4ubuntu2
updates main 0.14.2-4ubuntu3.1

Changelog

Version: 0.14.2-4ubuntu3.1 2020-10-06 14:06:22 UTC

  spice (0.14.2-4ubuntu3.1) focal-security; urgency=medium

  * SECURITY UPDATE: multiple buffer overflows in QUIC image decoding
    - debian/patches/CVE-2020-14355-1.patch: check we have some data to
      start decoding quic image in subprojects/spice-common/common/quic.c.
    - debian/patches/CVE-2020-14355-2.patch: check image size in
      quic_decode_begin in subprojects/spice-common/common/quic.c.
    - debian/patches/CVE-2020-14355-3.patch: check RLE lengths in
      subprojects/spice-common/common/quic_tmpl.c.
    - debian/patches/CVE-2020-14355-4.patch: avoid possible buffer overflow
      in find_bucket in subprojects/spice-common/common/quic_family_tmpl.c.
    - CVE-2020-14355

 -- Marc Deslauriers <email address hidden> Thu, 01 Oct 2020 07:03:54 -0400


About   -   Send Feedback to @ubuntu_updates