Summary
spice
[0.14.0-9.0.2.el7_9.1]
- Add ARM support
[0.14.0-9.1]
- Fix multiple buffer overflows in QUIC decoding code
Resolves: CVE-2020-14355
spice-gtk
[0.35-5.1]
- Fix multiple buffer overflows in QUIC decoding code
Resolves: CVE-2020-14355
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | spice-glib | 0:0.35-5.el7_9.1 |
| Oracle Linux · 7 | spice-glib-devel | 0:0.35-5.el7_9.1 |
| Oracle Linux · 7 | spice-gtk-tools | 0:0.35-5.el7_9.1 |
| Oracle Linux · 7 | spice-gtk3 | 0:0.35-5.el7_9.1 |
| Oracle Linux · 7 | spice-gtk3-devel | 0:0.35-5.el7_9.1 |
| Oracle Linux · 7 | spice-gtk3-vala | 0:0.35-5.el7_9.1 |
| Oracle Linux · 7 | spice-server | 0:0.14.0-9.0.2.el7_9.1 |
| Oracle Linux · 7 | spice-server-devel | 0:0.14.0-9.0.2.el7_9.1 |
Vulnerabilities 1
-
Unscored —
Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display syst…