< back to search

shield Security update for spice

slessp4-spice-12542

Spice was updated to fix three security issues. The following vulnerabilities were fixed: * CVE-2015-3247: heap corruption in the spice server (bsc#944460) * CVE-2015-5261: Guest could have accessed host memory using crafted images (bsc#948976) * CVE-2015-5260: Insufficient validation of surface_id parameter could have caused a crash (bsc#944787)

Release Date

May 7 2016
References

Bugzilla: 944460, 948976, 944787
CVEs: CVE-2015-3247, CVE-2015-5260, CVE-2015-5261
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server 11.4 i586

Packages

libspice-server1
Library for SPICE-server

0.12.4-5.1 lock rpm

spice
SPICE client and server library

0.12.4-5.1 lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

Packages

libspice-server1
Library for SPICE-server

0.12.4-5.1 lock rpm

spice
SPICE client and server library

0.12.4-5.1 lock src