[ubuntu/disco-proposed] spice 0.14.0-1ubuntu5 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Mon Jan 28 20:51:14 UTC 2019


spice (0.14.0-1ubuntu5) disco; urgency=medium

  * SECURITY UPDATE: off-by-one error in memslot_get_virt
    - debian/patches/CVE-2019-3813.patch: fix checks in server/memslot.c,
      add tests to server/tests/test-qxl-parsing.c.
    - CVE-2019-3813
  * debian/tests/automated-tests: fix incorrect test name, don't fail on
    build writing to stderr.

Date: Thu, 24 Jan 2019 08:58:10 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/spice/0.14.0-1ubuntu5
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 24 Jan 2019 08:58:10 -0500
Source: spice
Binary: libspice-server1 libspice-server-dev
Architecture: source
Version: 0.14.0-1ubuntu5
Distribution: disco
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 libspice-server-dev - Header files and development documentation for spice-server
 libspice-server1 - Implements the server side of the SPICE protocol
Changes:
 spice (0.14.0-1ubuntu5) disco; urgency=medium
 .
   * SECURITY UPDATE: off-by-one error in memslot_get_virt
     - debian/patches/CVE-2019-3813.patch: fix checks in server/memslot.c,
       add tests to server/tests/test-qxl-parsing.c.
     - CVE-2019-3813
   * debian/tests/automated-tests: fix incorrect test name, don't fail on
     build writing to stderr.
Checksums-Sha1:
 5f723f3ebfa012b37690f11a8b2d86ac369c02fb 2741 spice_0.14.0-1ubuntu5.dsc
 bfd4121a478665ab1f3cb7587219df9baf2f2eaa 19500 spice_0.14.0-1ubuntu5.debian.tar.xz
 bdb39831a8af84d436d02afdf2cbd113f8682002 15597 spice_0.14.0-1ubuntu5_source.buildinfo
Checksums-Sha256:
 00c5ec7ba3199df4bf3dd0e2a79188bbdad0439c0d5e49687c276a8196a23dfc 2741 spice_0.14.0-1ubuntu5.dsc
 d04458e9cda445bc547ca7e10db12119d149fe9a32e94f8a2bde574eec2f12b7 19500 spice_0.14.0-1ubuntu5.debian.tar.xz
 a831cfc2c12e3afefae079bbf8b07fb325b957393e87f084ad952b20d0156ee4 15597 spice_0.14.0-1ubuntu5_source.buildinfo
Files:
 65eab7794ab6ba87fa28b271cfbc7b28 2741 misc optional spice_0.14.0-1ubuntu5.dsc
 c7f88b7d6d91e1d2973daf64dc930b47 19500 misc optional spice_0.14.0-1ubuntu5.debian.tar.xz
 4eda2bdc8e3ddd25cf5e87805e238dc0 15597 misc optional spice_0.14.0-1ubuntu5_source.buildinfo
Original-Maintainer: Liang Guo <guoliang at debian.org>

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEUMSg3c8x5FLOsZtRZWnYVadEvpMFAlxPatEACgkQZWnYVadE
vpM5NRAAmbwy7n+1MFnHikj1b1OkTkLKQ08GEVBehqnKUHzG7R6bNmbT4d9nAX4P
OOsYwsuJztQ4tqXz+uIIhqMVhSYXeVf0yMbpHft+VZ0F838XQDThE2zvk7v0sZGn
zoLqYRnAaF1CjyuxNCBBS0u4TKbnmNdfsbzcanjejBK2FkjcphBr20mSan+KU2Nq
XKOaJvcqGCVniSutHnGQifYd7dmhn6VUwXFclHJecVv8DzJ0K/3lAbNYw2cuErJ2
+0bFR5Wx3mgjHjFLpxB5SJu1n6nTU99mMRusTepai1vdUQqsdxTYMP1JxsOLVxM3
owRcuIWfJFvSsnlhxN+mZfg63wwnk0EF1etehBW7vkOZ4uxINsw3H/umvNPTbTNH
HttUtaN/zJlCNCgM4cm4Lr2ksAxZrS57Yzqhs8F40SClwHsFmUvQpQI066+tyQuz
6Ks/h5UJMoWMsWJJBmtjtxSIRhXWOVN22yoQYtZctT5evhExyqxi9hi7+vxkmeVX
UVxaDNXb762hiVul3M+pj7MlwDK7IDPFh/+OwJKQpu6v5NvZHw6WhfgBZFi8kgXe
+pSHbB6HQ+Pt25QVWzrMq/eno9zdW0YEDPOANPaIrFmumAITb48FKGCFdRiv2H04
YMEntOH6r13foo7C/FqXORdjYZtDseSh7eEdAX9wD7BBSYPa9xw=
=1fWy
-----END PGP SIGNATURE-----


More information about the Disco-changes mailing list