Format: 1.8
Date: Thu, 01 Oct 2020 07:00:18 -0400
Source: spice
Binary: libspice-server-dev libspice-server1
Architecture: armhf
Version: 0.14.3-1ubuntu2
Distribution: groovy-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-049.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libspice-server-dev - Header files and development documentation for spice-server
 libspice-server1 - Implements the server side of the SPICE protocol
Changes:
 spice (0.14.3-1ubuntu2) groovy; urgency=medium
 .
   * SECURITY UPDATE: multiple buffer overflows in QUIC image decoding
     - debian/patches/CVE-2020-14355-1.patch: check we have some data to
       start decoding quic image in subprojects/spice-common/common/quic.c.
     - debian/patches/CVE-2020-14355-2.patch: check image size in
       quic_decode_begin in subprojects/spice-common/common/quic.c.
     - debian/patches/CVE-2020-14355-3.patch: check RLE lengths in
       subprojects/spice-common/common/quic_tmpl.c.
     - debian/patches/CVE-2020-14355-4.patch: avoid possible buffer overflow
       in find_bucket in subprojects/spice-common/common/quic_family_tmpl.c.
     - CVE-2020-14355
Checksums-Sha1:
 c20dca87f2707221c9e961518489390c02c2af99 10672 libspice-server-dev_0.14.3-1ubuntu2_armhf.deb
 b3b3a3193171decfebae05c3b7d0e118932188dc 1712804 libspice-server1-dbgsym_0.14.3-1ubuntu2_armhf.ddeb
 792cf39b6b589132023943078c433a1c88c45d12 291240 libspice-server1_0.14.3-1ubuntu2_armhf.deb
 21b5d642649ccc210e45e7e4cb17fe2ad5d5dd30 15341 spice_0.14.3-1ubuntu2_armhf.buildinfo
Checksums-Sha256:
 fb633010b8dcecf1634d982e0be1e3e4dde9312ca1257bdbf9626194d5d79cd4 10672 libspice-server-dev_0.14.3-1ubuntu2_armhf.deb
 5273de08edb43b29c7d688568c423ddbd9baa6943d15428426494ba917f002e6 1712804 libspice-server1-dbgsym_0.14.3-1ubuntu2_armhf.ddeb
 b0a48d0914305df4b6fa00ef79d5ab2d9be33e0d0fac838f6200e3ed500e294e 291240 libspice-server1_0.14.3-1ubuntu2_armhf.deb
 fcaba0a00e8e46f88134cb945dd1519ae1b3c385e19e8a20455d45c62e1698b4 15341 spice_0.14.3-1ubuntu2_armhf.buildinfo
Files:
 da7b1763fd702db202d11cf061756343 10672 libdevel optional libspice-server-dev_0.14.3-1ubuntu2_armhf.deb
 78524f499acdb9a006a26bfa009c9bbb 1712804 debug optional libspice-server1-dbgsym_0.14.3-1ubuntu2_armhf.ddeb
 0f059ae5b5977efd697cb5243b34306e 291240 libs optional libspice-server1_0.14.3-1ubuntu2_armhf.deb
 d636163f721acf1771219c6f5ad266d1 15341 misc optional spice_0.14.3-1ubuntu2_armhf.buildinfo
Original-Maintainer: Debian QEMU Team <pkg-qemu-devel@lists.alioth.debian.org>