shield Security update for spice

SUSE-SLE-SERVER-12-2015-674

Spice was updated to fix three security issues. The following vulnerabilities were fixed: * CVE-2015-3247: heap corruption in the spice server (bsc#944460) * CVE-2015-5261: Guest could have accessed host memory using crafted images (bsc#948976) * CVE-2015-5260: Insufficient validation of surface_id parameter could have caused a crash (bsc#944460)

• Release Date
  Oct 7 2015
• References
  Bugzilla: 948976, 944460
  CVEs: CVE-2015-3247, CVE-2015-5260, CVE-2015-5261
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12 x86_64

• Packages
  libspice-server1
  Library for SPICE-server

  0.12.4-8.5.1 lock rpm

  spice
  SPICE client and server library

  0.12.4-8.5.1 lock src