gpp_maybe Security update for spice-vdagent

SUSE-SLE-Module-Desktop-Applications-15-SP3-2021-2614

This update for spice-vdagent fixes the following issues: - Update to version 0.21.0 - CVE-2020-25650: memory DoS via arbitrary entries in `active_xfers` hash table (bsc#1177780) - CVE-2020-25651: possible file transfer DoS and information leak via `active_xfers` hash map (bsc#1177781) - CVE-2020-25652: possibility to exhaust file descriptors in `vdagentd` (bsc#1177782) - CVE-2020-25653: UNIX domain socket peer PID retrieved via `SO_PEERCRED` is subject to race condition (bsc#1177783)

• Release Date
  Aug 5 2021
• References
  Bugzilla: 1173749, 1177781, 1177780, 1177782, 1177783
  CVEs: CVE-2020-25651, CVE-2020-25652, CVE-2020-25653, CVE-2020-25650
• Type
  security
• Severity
  important

cloud_download Downloads

Desktop Applications Module 15.3 aarch64

• Packages
  spice-vdagent
  Agent for Spice guests

  0.21.0-3.3.1 lock rpm lock src

Desktop Applications Module 15.3 s390x

• Packages
  spice-vdagent
  Agent for Spice guests

  0.21.0-3.3.1 lock rpm lock src

Desktop Applications Module 15.3 ppc64le

• Packages
  spice-vdagent
  Agent for Spice guests

  0.21.0-3.3.1 lock rpm lock src

Desktop Applications Module 15.3 x86_64

• Packages
  spice-vdagent
  Agent for Spice guests

  0.21.0-3.3.1 lock rpm lock src