Univention Bugzilla – Bug 48600
spice: Multiple issues (4.2)
Last modified: 2019-02-06 12:56:07 CET
New Debian spice 0.12.5-1+deb8u7 fixes: This update addresses the following issue: * Off-by-one error in array access in spice/server/memslot.c (CVE-2019-3813)
--- mirror/ftp/4.2/unmaintained/4.2-5/source/spice_0.12.5-1+deb8u6.dsc +++ apt/ucs_4.2-0-errata4.2-5/source/spice_0.12.5-1+deb8u7.dsc @@ -1,3 +1,8 @@ +0.12.5-1+deb8u7 [Wed, 30 Jan 2019 13:40:33 +0100] Emilio Pozuelo Monfort <pochu@debian.org>: + + * Non-maintainer upload by the LTS Team. + * CVE-2019-3813: memslot: out of bounds read due to off-by-one error. + 0.12.5-1+deb8u6 [Fri, 31 Aug 2018 20:44:48 +0200] Mike Gabriel <sunweaver@debian.org>: * Non-maintainer upload by the LTS Team. <http://10.200.17.11/4.2-5/#1945788768382069571>
OK: yaml OK: announce_errata OK: patch OK: piuparts [4.2-5] 49ac1e7388 Bug #48600: spice 0.12.5-1+deb8u7 doc/errata/staging/spice.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+)
<http://errata.software-univention.de/ucs/4.2/596.html>