Red Hat Security AdvisoryRHSA-2020:0471
spice-gtk security update
Released 2020-02-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) spice-glib-0.26-8.el6_10.2, spice-gtk-0.26-8.el6_10.2, spice-gtk-python-0.26-8.el6_10.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) spice-glib-devel-0.26-8.el6_10.2, spice-gtk-devel-0.26-8.el6_10.2, spice-gtk-tools-0.26-8.el6_10.2
- Red Hat Enterprise Linux HPC Node (v. 6) spice-glib-0.26-8.el6_10.2, spice-gtk-0.26-8.el6_10.2, spice-gtk-python-0.26-8.el6_10.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) spice-glib-devel-0.26-8.el6_10.2, spice-gtk-devel-0.26-8.el6_10.2, spice-gtk-tools-0.26-8.el6_10.2
- Red Hat Enterprise Linux Server (v. 6) spice-glib-0.26-8.el6_10.2, spice-gtk-0.26-8.el6_10.2, spice-gtk-python-0.26-8.el6_10.2
- Red Hat Enterprise Linux Server Optional (v. 6) spice-glib-devel-0.26-8.el6_10.2, spice-gtk-devel-0.26-8.el6_10.2, spice-gtk-tools-0.26-8.el6_10.2
- Red Hat Enterprise Linux Workstation (v. 6) spice-glib-0.26-8.el6_10.2, spice-gtk-0.26-8.el6_10.2, spice-gtk-python-0.26-8.el6_10.2
- Red Hat Enterprise Linux Workstation Optional (v. 6) spice-glib-devel-0.26-8.el6_10.2, spice-gtk-devel-0.26-8.el6_10.2, spice-gtk-tools-0.26-8.el6_10.2
Fixes 1 record
Priority MEDIUM 43
Multiple integer overflow and buffer overflow issues were discovered in spice-client's handling of LZ compressed frames.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02363 · Published 2018-09-11 · Partial fix CWE-122