ELSA-2016-1205

ELSA-2016-1205 - spice security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2016-06-06

Description

[0.12.4-15.1]
- Fix heap-based memory corruption within smartcard handling
Resolves: CVE-2016-0749
- Fix host memory access from guest with invalid primary surface parameters
Resolves: CVE-2016-2150

Related CVEs

CVE-2016-2150

CVE-2016-0749

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	spice-0.12.4-15.el7_2.1.src.rpm	10e3bd0a291477259b265758b1a52e549b21fe9f412c937245c4a189204085a2	ELSA-2020-4187	ol7_x86_64_latest_archive
	spice-0.12.4-15.el7_2.1.src.rpm	10e3bd0a291477259b265758b1a52e549b21fe9f412c937245c4a189204085a2	ELSA-2020-4187	ol7_x86_64_optional_archive
	spice-0.12.4-15.el7_2.1.src.rpm	10e3bd0a291477259b265758b1a52e549b21fe9f412c937245c4a189204085a2	ELSA-2020-4187	ol7_x86_64_u2_patch
	spice-server-0.12.4-15.el7_2.1.x86_64.rpm	29b621eeee9d6c68020610cc11f36d67bbf7b51143a6cb21036f59e3e997f131	ELSA-2020-4187	ol7_x86_64_latest_archive
	spice-server-0.12.4-15.el7_2.1.x86_64.rpm	29b621eeee9d6c68020610cc11f36d67bbf7b51143a6cb21036f59e3e997f131	ELSA-2020-4187	ol7_x86_64_u2_patch
	spice-server-devel-0.12.4-15.el7_2.1.x86_64.rpm	0c593fd503c6e0a1e9049e7ecff36aa3f6d0344440dd4d2a1543d37aaa5831b8	ELSA-2020-4187	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team