Publishing details

• Published on 2020-10-06
• Copied from ubuntu focal in Private PPA for Ubuntu Security Team by Marc Deslauriers

Changelog

spice (0.14.2-4ubuntu3.1) focal-security; urgency=medium

  * SECURITY UPDATE: multiple buffer overflows in QUIC image decoding
    - debian/patches/CVE-2020-14355-1.patch: check we have some data to
      start decoding quic image in subprojects/spice-common/common/quic.c.
    - debian/patches/CVE-2020-14355-2.patch: check image size in
      quic_decode_begin in subprojects/spice-common/common/quic.c.
    - debian/patches/CVE-2020-14355-3.patch: check RLE lengths in
      subprojects/spice-common/common/quic_tmpl.c.
    - debian/patches/CVE-2020-14355-4.patch: avoid possible buffer overflow
      in find_bucket in subprojects/spice-common/common/quic_family_tmpl.c.
    - CVE-2020-14355

 -- Marc Deslauriers <email address hidden>  Thu, 01 Oct 2020 07:03:54 -0400

Builds

• amd64
• arm64
• armhf
• ppc64el

Built packages

• libspice-server-dev Header files and development documentation for spice-server

• libspice-server1 Implements the server side of the SPICE protocol

• libspice-server1-dbgsym debug symbols for libspice-server1

Package files

• libspice-server-dev_0.14.2-4ubuntu3.1_amd64.deb (10.1 KiB)
• libspice-server-dev_0.14.2-4ubuntu3.1_arm64.deb (10.1 KiB)
• libspice-server-dev_0.14.2-4ubuntu3.1_armhf.deb (10.1 KiB)
• libspice-server-dev_0.14.2-4ubuntu3.1_ppc64el.deb (10.1 KiB)
• libspice-server1-dbgsym_0.14.2-4ubuntu3.1_amd64.ddeb (1.8 MiB)
• libspice-server1-dbgsym_0.14.2-4ubuntu3.1_arm64.ddeb (1.8 MiB)
• libspice-server1-dbgsym_0.14.2-4ubuntu3.1_armhf.ddeb (1.8 MiB)
• libspice-server1-dbgsym_0.14.2-4ubuntu3.1_ppc64el.ddeb (2.0 MiB)
• libspice-server1_0.14.2-4ubuntu3.1_amd64.deb (335.3 KiB)
• libspice-server1_0.14.2-4ubuntu3.1_arm64.deb (301.5 KiB)
• libspice-server1_0.14.2-4ubuntu3.1_armhf.deb (291.5 KiB)
• libspice-server1_0.14.2-4ubuntu3.1_ppc64el.deb (367.2 KiB)
• spice_0.14.2-4ubuntu3.1.debian.tar.xz (27.5 KiB)
• spice_0.14.2-4ubuntu3.1.dsc (2.7 KiB)
• spice_0.14.2.orig.tar.bz2 (1.3 MiB)