[ubuntu-cloud-archive/icehouse-proposed] spice (Accepted)

[Ryan Beisner]

 spice (0.12.4-0nocelt2ubuntu1.3~cloud0) precise-icehouse; urgency=medium
 .
   * New update for the Ubuntu Cloud Archive.
 .
 spice (0.12.4-0nocelt2ubuntu1.3) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service and possible code execution via
     memory allocation flaw in smartcard interaction
     - debian/patches/CVE-2016-0749/*.patch: add a ref to item and allocate
       msg with the expected size in server/smartcard.c.
     - CVE-2016-0749
   * SECURITY UPDATE: host memory access from guest with invalid primary
     surface parameters
     - debian/patches/CVE-2016-2150/*.patch: create a function to validate
       surface parameters in server/red_parse_qxl.*, improve primary surface
       parameter checks in server/red_worker.c.
     - CVE-2016-2150
   * Added two extra commits to previous security update:
     - 0001-worker-validate-correctly-surfaces.patch
     - 0002-worker-avoid-double-free-or-double-create-of-surface.patch

Date: Wed, 22 Jun 2016 03:11:54 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Ryan Beisner <ryan.beisner at canonical.com>