Summary
[0.12.8-2.1]
- Redo build properly versioned as a zstream build
Related: CVE-2017-7506
[0.12.8-3]
- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
sent from an authenticated client
Resolves: CVE-2017-7506
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | spice-server | 0:0.12.8-2.el7.1 |
| Oracle Linux · 7 | spice-server-devel | 0:0.12.8-2.el7.1 |
Vulnerabilities 1
-
Unscored —
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages fro…