Oracle alert ELSA-2013-1474 (qspice)
From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
To: | el-errata@oss.oracle.com | |
Subject: | [El-errata] ELSA-2013-1474 Important: Oracle Linux 5 qspice security update | |
Date: | Tue, 29 Oct 2013 20:10:51 -0700 | |
Message-ID: | <527078BB.2000304@oracle.com> |
Oracle Linux Security Advisory ELSA-2013-1474 https://rhn.redhat.com/errata/RHSA-2013-1474.html The following updated rpms for Oracle Linux 5 have been uploaded to the Unbreakable Linux Network: x86_64: qspice-libs-0.3.0-56.el5_10.1.x86_64.rpm qspice-0.3.0-56.el5_10.1.x86_64.rpm qspice-libs-devel-0.3.0-56.el5_10.1.x86_64.rpm SRPMS: http://oss.oracle.com/ol5/SRPMS-updates/qspice-0.3.0-56.e... Description of changes: [0.3.0-56.1] - Fix spice-server crash when client sends a password which is too long Resolves: CVE-2013-4282 [0.3.0-56.el5] - Fix unsafe accesses + spice: drop libpng from windows components (537849) + libspice: fix unsafe guest data accessing Resolves: #568720 + fix unsafe free() call. Resolves: #568724 + spice server: fix unsafe cursor items handling. Resolves: #568720 [0.3.0-55.el5] - spice: clear client palette caches on migration Resolves: #599496 _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata