Ubuntu
spice package

spice 0.14.2-4ubuntu3.1 source package in Ubuntu

Changelog

spice (0.14.2-4ubuntu3.1) focal-security; urgency=medium

  * SECURITY UPDATE: multiple buffer overflows in QUIC image decoding
    - debian/patches/CVE-2020-14355-1.patch: check we have some data to
      start decoding quic image in subprojects/spice-common/common/quic.c.
    - debian/patches/CVE-2020-14355-2.patch: check image size in
      quic_decode_begin in subprojects/spice-common/common/quic.c.
    - debian/patches/CVE-2020-14355-3.patch: check RLE lengths in
      subprojects/spice-common/common/quic_tmpl.c.
    - debian/patches/CVE-2020-14355-4.patch: avoid possible buffer overflow
      in find_bucket in subprojects/spice-common/common/quic_family_tmpl.c.
    - CVE-2020-14355

 -- Marc Deslauriers <email address hidden>  Thu, 01 Oct 2020 07:03:54 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
alpha amd64 arm64 armel armhf i386 mips64el mipsel ppc64el sh4 x32
Section:
misc
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates main misc
Focal security main misc

Downloads

File Size SHA-256 Checksum
spice_0.14.2.orig.tar.bz2 1.3 MiB b203b3882e06f4c7249a3150d90c84e1a90490d41ead255a3d2cede46f4a29a7
spice_0.14.2-4ubuntu3.1.debian.tar.xz 27.5 KiB 0d609f239e1aaf0d73da00c0fad2838b056c0177633ae47e4f56f8c2039f4cc2
spice_0.14.2-4ubuntu3.1.dsc 2.7 KiB 90b0435506b0684be0fa378f8f02636d1c8b4cc6a0c85c09a23616d77fc23738

View changes file

Binary packages built by this source

libspice-server-dev: Header files and development documentation for spice-server

 The Simple Protocol for Independent Computing Environments (SPICE) is
 a remote display system built for virtual environments which allows
 you to view a computing 'desktop' environment not only on the machine
 where it is running, but from anywhere on the Internet and from a wide
 variety of machine architectures.
 .
 This package contains the header files, static libraries and development
 documentation for spice-server.

libspice-server1: Implements the server side of the SPICE protocol

 The Simple Protocol for Independent Computing Environments (SPICE) is
 a remote display system built for virtual environments which allows
 you to view a computing 'desktop' environment not only on the machine
 where it is running, but from anywhere on the Internet and from a wide
 variety of machine architectures.
 .
 This package contains the run-time libraries for any application that
 wishes to be a SPICE server.

libspice-server1-dbgsym: debug symbols for libspice-server1