High ELSA-2020-4186 1 CVE

Important: spice and spice-gtk security update (Oracle Linux 8)

Published Oct 7, 2020 · Updated Oct 7, 2020

Ecosystem: Oracle Linux

Summary

spice
[0.14.2-1.1]
- Fix multiple buffer overflows in QUIC decoding code
Resolves: CVE-2020-14355

spice-gtk
[0.37-1.2]
- Fix multiple buffer overflows in QUIC decoding code
Resolves: CVE-2020-14355

Fixed packages 9

Release	Package	Fixed in
Oracle Linux · 8	spice-glib	0:0.37-1.el8_2.2
Oracle Linux · 8	spice-glib-devel	0:0.37-1.el8_2.2
Oracle Linux · 8	spice-gtk	0:0.37-1.el8_2.2
Oracle Linux · 8	spice-gtk-tools	0:0.37-1.el8_2.2
Oracle Linux · 8	spice-gtk3	0:0.37-1.el8_2.2
Oracle Linux · 8	spice-gtk3-devel	0:0.37-1.el8_2.2
Oracle Linux · 8	spice-gtk3-vala	0:0.37-1.el8_2.2
Oracle Linux · 8	spice-server	0:0.14.2-1.el8_2.1
Oracle Linux · 8	spice-server-devel	0:0.14.2-1.el8_2.1

Vulnerabilities 1

Unscored —

CVE-2020-14355

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display syst…

spice spice spice-gtk spice Debian Ubuntu Alpine

Oct 7, 2020