spice (0.12.4-0nocelt2ubuntu1.5) trusty-security; urgency=medium
* SECURITY UPDATE: buffer overflow via invalid monitor configurations
- debian/patches/CVE-2017-7506-1.patch: disconnect when receiving
overly big ClientMonitorsConfig in server/reds.c.
- debian/patches/CVE-2017-7506-2.patch: avoid integer overflows
handling monitor configuration in server/reds.c.
- debian/patches/CVE-2017-7506-3.patch: avoid buffer overflows handling
monitor configuration in server/reds.c.
- CVE-2017-7506
Date: 2017-07-18 18:51:25.648071+00:00
Changed-By: Marc Deslauriers <[email protected]>
Signed-By: Ubuntu Archive Robot
<[email protected]>
https://launchpad.net/ubuntu/+source/spice/0.12.4-0nocelt2ubuntu1.5
Sorry, changesfile not available.
--
Trusty-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/trusty-changes
