[ol7_latest_archive] spice-server-0.12.4-20.el7_3.x86_64

The Simple Protocol for Independent Computing Environments (SPICE) is
a remote display system built for virtual environments which allows
you to view a computing 'desktop' environment not only on the machine
where it is running, but from anywhere on the Internet and from a wide
variety of machine architectures.

This package contains the run-time libraries for any application that wishes
to be a SPICE server.

Changelog (Show File list) (Show related packages)

• Fri Dec 09 2016 Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20

  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578

• Fri Sep 09 2016 Christophe Fergeau <cfergeau@redhat.com> 0.12.4-19

  - Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
    Resolves: rhbz#1352836

• Fri Jul 01 2016 Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-18

  - Fix crash when connecting to VM using smartcard passthrough
    Resolves: rhbz#1340899
  - Fix hang after unredirecting a USB device
    Resolves: rhbz#1338752
  - Backport spice_qxl_set_max_monitors()
    Resolves: rhbz#1283202

• Wed Apr 27 2016 Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-17

  - Fix crash when the client sends a wrong header (for example when using spice-html5)
    Resolves: rhbz#1281442
  - Fix crash when guest provides wrong address
    Resolves: rhbz#1264356
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375
  - Add patches reducing QEMU wake-ups
    Related: rhbz#912763, rhbz#1186146
  - Fix use-after-free after resetting a VM
    Resolves: rhbz#1281455
  - Send KeepAlive probes every 10 minutes
    Resolves: rhbz#1298590
  - Add client to guest volume synchronization
    Resolves: rhbz#1264107

• Mon Apr 25 2016 Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16

  - Use autosetup
    Related: CVE-2016-0749
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150

• Wed Sep 23 2015 Frediano Ziglio <fziglio@redhat.com> 0.12.4-15

  - CVE-2015-5260 CVE-2015-5261 fixed various security flaws
    Resolves: rhbz#1267134

• Thu Sep 10 2015 Frediano Ziglio <fziglio@redhat.com> 0.12.4-14

  - Validate surface_id
    Resolves: rhbz#1260971

• Tue Jul 21 2015 Frediano Ziglio <fziglio@redhat.com> 0.12.4-13

  - Clean stale statistics file before creating a new one
    Resolves: rhbz#1177326

• Fri Jul 10 2015 Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-12

  - Fix a backport issue on Patch0040.
    Related: rhbz#1071176
    Resolves: rhbz#1241860

• Thu Jul 09 2015 Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11

  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443