ELSA-2016-1204

ELSA-2016-1204 - spice-server security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2016-06-06

Description

[0.12.4-13.1]
- Fix heap-based memory corruption within smartcard handling
Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
Resolves: CVE-2016-2150

Related CVEs

CVE-2016-2150

CVE-2016-0749

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	spice-server-0.12.4-13.el6.1.src.rpm	b8778a40354584f653563d0e9729a82be4c85edb1a417f518a63fc55dc6a721d	ELSA-2019-0232	ol6_u8_x86_64_patch
	spice-server-0.12.4-13.el6.1.src.rpm	b8778a40354584f653563d0e9729a82be4c85edb1a417f518a63fc55dc6a721d	ELSA-2019-0232	ol6_x86_64_latest_archive
	spice-server-0.12.4-13.el6.1.x86_64.rpm	b11e3f67d9e2262f518ac50b761b023b28af8edbdc4a70dc49100db66364427c	ELSA-2019-0232	ol6_u8_x86_64_patch
	spice-server-0.12.4-13.el6.1.x86_64.rpm	b11e3f67d9e2262f518ac50b761b023b28af8edbdc4a70dc49100db66364427c	ELSA-2019-0232	ol6_x86_64_latest_archive
	spice-server-devel-0.12.4-13.el6.1.x86_64.rpm	ac428ea0e68d10d89833112bae61bd41c6ec304f0367d77e8ee759a47a6089f3	ELSA-2019-0232	ol6_u8_x86_64_patch
	spice-server-devel-0.12.4-13.el6.1.x86_64.rpm	ac428ea0e68d10d89833112bae61bd41c6ec304f0367d77e8ee759a47a6089f3	ELSA-2019-0232	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team