shield Security update for spice

SUSE-SLE-SDK-12-SP1-2016-925

spice was updated to fix four security issues. These security issues were fixed: - CVE-2016-2150: Guest escape using crafted primary surface parameters (bsc#982386). - CVE-2016-0749: Heap-based buffer overflow in smartcard interaction (bsc#982385). - CVE-2015-5260: Insufficient validation of surface_id parameter could have caused a crash (bsc#944787). - CVE-2015-5261: Host memory access from guest using crafted images (bsc#948976).

• Release Date
  Jun 13 2016
• References
  Bugzilla: 982385, 982386, 944787, 948976
  CVEs: CVE-2016-0749, CVE-2016-2150, CVE-2015-5260, CVE-2015-5261
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.1 x86_64

• Packages
  libspice-server-devel
  Development files for building SPICE-server

  0.12.5-4.1 lock rpm

  spice
  SPICE client and server library

  0.12.5-4.1 lock src