Format: 1.8 Date: Tue, 18 Jul 2017 13:34:33 -0400 Source: spice Binary: libspice-server1 libspice-server1-dbg libspice-server-dev Architecture: amd64 Version: 0.12.6-4ubuntu0.3 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libspice-server-dev - Header files and development documentation for spice-server libspice-server1 - Implements the server side of the SPICE protocol libspice-server1-dbg - Debugging symbols for libspice-server1 Changes: spice (0.12.6-4ubuntu0.3) xenial-security; urgency=medium . * SECURITY UPDATE: buffer overflow via invalid monitor configurations - debian/patches/CVE-2017-7506-1.patch: disconnect when receiving overly big ClientMonitorsConfig in server/reds.c. - debian/patches/CVE-2017-7506-2.patch: avoid integer overflows handling monitor configuration in server/reds.c. - debian/patches/CVE-2017-7506-3.patch: avoid buffer overflows handling monitor configuration in server/reds.c. - CVE-2017-7506 Checksums-Sha1: 2225c39cf9bb8abfc3acdf03e112849e41515dcc 1026 libspice-server-dev-dbgsym_0.12.6-4ubuntu0.3_amd64.ddeb fd1fc0eb9239c6102398d6d3418eb1134d795b4a 369932 libspice-server-dev_0.12.6-4ubuntu0.3_amd64.deb ffd37d4d964a790342c8a7eddb9d2c03e394414b 1296402 libspice-server1-dbg_0.12.6-4ubuntu0.3_amd64.deb 09facae2a2e9e54422c38641b7ce221dbd8cf209 1030 libspice-server1-dbgsym_0.12.6-4ubuntu0.3_amd64.ddeb 8caae652448997de4818311787399d0a179bb410 337910 libspice-server1_0.12.6-4ubuntu0.3_amd64.deb Checksums-Sha256: c289c862aa771f86179caea8e3fb6fd6a62d4a77ce0df7cd9ef6b56338b1579c 1026 libspice-server-dev-dbgsym_0.12.6-4ubuntu0.3_amd64.ddeb a8797170ca1588024981f33c8cfc5c0ea9bb69431654f5357b92af21a7a11f04 369932 libspice-server-dev_0.12.6-4ubuntu0.3_amd64.deb 976a13ac602e0833a000c2698b6d1aaf275002e4023ca1a878a9e495ca19c1d3 1296402 libspice-server1-dbg_0.12.6-4ubuntu0.3_amd64.deb 9a2a5f7831ea187090ca03ffd733cc7cbee7c96d15f393e8e99424e93f0e30cd 1030 libspice-server1-dbgsym_0.12.6-4ubuntu0.3_amd64.ddeb 95d4d25bea5ecf40291e67d0319eab523b48b3d52e83abfb28fc7c3267890662 337910 libspice-server1_0.12.6-4ubuntu0.3_amd64.deb Files: 25aad3f662b782c576a6a3a39a03c599 1026 libdevel extra libspice-server-dev-dbgsym_0.12.6-4ubuntu0.3_amd64.ddeb 5bd882533a4b3eae3258246ad57eb25b 369932 libdevel optional libspice-server-dev_0.12.6-4ubuntu0.3_amd64.deb 02f3963ca156fd8a2759a486e74baa37 1296402 debug extra libspice-server1-dbg_0.12.6-4ubuntu0.3_amd64.deb dcecf8a92666a17786d3f412977fcc4a 1030 libs extra libspice-server1-dbgsym_0.12.6-4ubuntu0.3_amd64.ddeb 0b1c584b106d3c8cc775fe2a7b821130 337910 libs optional libspice-server1_0.12.6-4ubuntu0.3_amd64.deb Original-Maintainer: Liang Guo