ELSA-2017-2471

ELSA-2017-2471 - spice security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2017-08-15

Description

[0.12.8-2.1]
- Redo build properly versioned as a zstream build
Related: CVE-2017-7506

[0.12.8-3]
- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
sent from an authenticated client
Resolves: CVE-2017-7506

Related CVEs

CVE-2017-7506

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	spice-0.12.8-2.el7.1.src.rpm	5f4ccebd113b7538cfb276f7b269b06e0654ae71b130e86626235670c978d7a5	ELSA-2020-4187	ol7_x86_64_latest_archive
	spice-0.12.8-2.el7.1.src.rpm	5f4ccebd113b7538cfb276f7b269b06e0654ae71b130e86626235670c978d7a5	ELSA-2020-4187	ol7_x86_64_optional_archive
	spice-0.12.8-2.el7.1.src.rpm	5f4ccebd113b7538cfb276f7b269b06e0654ae71b130e86626235670c978d7a5	ELSA-2020-4187	ol7_x86_64_u4_patch
	spice-server-0.12.8-2.el7.1.x86_64.rpm	6365c902ef3b9fb38bb178bfc12300446dbfdf969fc19b3cfb27729af9f7a142	ELSA-2020-4187	ol7_x86_64_latest_archive
	spice-server-0.12.8-2.el7.1.x86_64.rpm	6365c902ef3b9fb38bb178bfc12300446dbfdf969fc19b3cfb27729af9f7a142	ELSA-2020-4187	ol7_x86_64_u4_patch
	spice-server-devel-0.12.8-2.el7.1.x86_64.rpm	816e4a21c30d08fe2acd0817ce88b058e0c34c0f61e52d042b2007e8232432db	ELSA-2020-4187	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team