UbuntuUpdates.org

Package "libspice-server1"

Name: libspice-server1

Description:

Implements the server side of the SPICE protocol
Latest version: 0.14.2-4ubuntu3.1
Release: focal (20.04)
Level: updates
Repository: main
Head package: spice
Homepage: http://www.spice-space.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libspice-server1"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libspice-server1" in Focal

Repository Area Version
base main 0.14.2-4ubuntu2
security main 0.14.2-4ubuntu3.1

Changelog

Version: 0.14.2-4ubuntu3.1 2020-10-06 15:06:21 UTC

  spice (0.14.2-4ubuntu3.1) focal-security; urgency=medium

  * SECURITY UPDATE: multiple buffer overflows in QUIC image decoding
    - debian/patches/CVE-2020-14355-1.patch: check we have some data to
      start decoding quic image in subprojects/spice-common/common/quic.c.
    - debian/patches/CVE-2020-14355-2.patch: check image size in
      quic_decode_begin in subprojects/spice-common/common/quic.c.
    - debian/patches/CVE-2020-14355-3.patch: check RLE lengths in
      subprojects/spice-common/common/quic_tmpl.c.
    - debian/patches/CVE-2020-14355-4.patch: avoid possible buffer overflow
      in find_bucket in subprojects/spice-common/common/quic_family_tmpl.c.
    - CVE-2020-14355

 -- Marc Deslauriers <email address hidden> Thu, 01 Oct 2020 07:03:54 -0400
Source diff to previous version

Version: 0.14.2-4ubuntu3 2020-04-28 22:44:10 UTC

  spice (0.14.2-4ubuntu3) focal; urgency=medium

  * d/p/lp-1874054-*: fix rescaling and some crashes (LP: #1874054)

 -- Christian Ehrhardt <email address hidden> Tue, 21 Apr 2020 14:05:18 +0200
1874054 fail to resize with qxl


About   -   Send Feedback to @ubuntu_updates