Summary
[0.14.3-4]
- Disable client-side renegotiation to prevent potential DoS
Resolves: rhbz#1904459
[0.14.3-3]
- Fix some static analyzer issues
- Removed Obsoletes line for spice-client
Related: rhbz#1840240
[0.14.3-2]
- Fix multiple buffer overflows in QUIC decoding code
Resolves: rhbz#1829946
[0.14.3-1]
- Update to 0.14.3
Revolves: rhbz#1840240
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | spice-server | 0:0.14.3-4.el8 |
| Oracle Linux · 8 | spice-server-devel | 0:0.14.3-4.el8 |
Vulnerabilities 1
-
Unscored —
A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a d…