ELSA-2013-1474

ELSA-2013-1474 - qspice security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2013-10-29

Description

[0.3.0-56.1]
- Fix spice-server crash when client sends a password which is too long
Resolves: CVE-2013-4282

[0.3.0-56.el5]
- Fix unsafe accesses
+ spice: drop libpng from windows components (537849)
+ libspice: fix unsafe guest data accessing
Resolves: #568720
+ fix unsafe free() call.
Resolves: #568724
+ spice server: fix unsafe cursor items handling.
Resolves: #568720

[0.3.0-55.el5]
- spice: clear client palette caches on migration
Resolves: #599496

Related CVEs

CVE-2013-4282

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (x86_64)	qspice-0.3.0-56.el5_10.1.src.rpm	427dbfdefb0cc1cbe1db2f07e5e0b3bcbe43f0c56b5f0713dba20375e7c0776a	-	ol5_u10_x86_64_patch
	qspice-0.3.0-56.el5_10.1.src.rpm	427dbfdefb0cc1cbe1db2f07e5e0b3bcbe43f0c56b5f0713dba20375e7c0776a	-	ol5_u11_x86_64_base
	qspice-0.3.0-56.el5_10.1.src.rpm	427dbfdefb0cc1cbe1db2f07e5e0b3bcbe43f0c56b5f0713dba20375e7c0776a	-	ol5_x86_64_latest
	qspice-0.3.0-56.el5_10.1.x86_64.rpm	2100f256acfe88fef1700f710c0c797b3aeef7605754b1f153a8c3dc8b46c154	-	ol5_u10_x86_64_patch
	qspice-0.3.0-56.el5_10.1.x86_64.rpm	2100f256acfe88fef1700f710c0c797b3aeef7605754b1f153a8c3dc8b46c154	-	ol5_u11_x86_64_base
	qspice-0.3.0-56.el5_10.1.x86_64.rpm	2100f256acfe88fef1700f710c0c797b3aeef7605754b1f153a8c3dc8b46c154	-	ol5_x86_64_latest
	qspice-libs-0.3.0-56.el5_10.1.x86_64.rpm	382d68a26c6d0aa43cebc2b6876b87058d776abef48ae89939fffb55e5bb3bc2	-	ol5_u10_x86_64_patch
	qspice-libs-0.3.0-56.el5_10.1.x86_64.rpm	382d68a26c6d0aa43cebc2b6876b87058d776abef48ae89939fffb55e5bb3bc2	-	ol5_u11_x86_64_base
	qspice-libs-0.3.0-56.el5_10.1.x86_64.rpm	382d68a26c6d0aa43cebc2b6876b87058d776abef48ae89939fffb55e5bb3bc2	-	ol5_x86_64_latest
	qspice-libs-devel-0.3.0-56.el5_10.1.x86_64.rpm	a9b7d379fe6d4454b77827098e7748dcd01fc789a51c10e314334438aa12b17f	-	ol5_u10_x86_64_patch
	qspice-libs-devel-0.3.0-56.el5_10.1.x86_64.rpm	a9b7d379fe6d4454b77827098e7748dcd01fc789a51c10e314334438aa12b17f	-	ol5_u11_x86_64_base
	qspice-libs-devel-0.3.0-56.el5_10.1.x86_64.rpm	a9b7d379fe6d4454b77827098e7748dcd01fc789a51c10e314334438aa12b17f	-	ol5_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team