shield Security update for spice

sdksp4-spice-12542

Spice was updated to fix three security issues. The following vulnerabilities were fixed: * CVE-2015-3247: heap corruption in the spice server (bsc#944460) * CVE-2015-5261: Guest could have accessed host memory using crafted images (bsc#948976) * CVE-2015-5260: Insufficient validation of surface_id parameter could have caused a crash (bsc#944787)

• Release Date
  May 7 2016
• References
  Bugzilla: 944460, 948976, 944787
  CVEs: CVE-2015-3247, CVE-2015-5260, CVE-2015-5261
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libspice-server-devel
  Development files for building SPICE-server

  0.12.4-5.1 lock rpm

  spice
  SPICE client and server library

  0.12.4-5.1 lock src

SUSE Linux Enterprise Software Development Kit 11.4 unknown

• Packages
  libspice-server-devel
  Development files for building SPICE-server

  0.12.4-5.1 lock rpm

  spice
  SPICE client and server library

  0.12.4-5.1 lock src