tocsin

Debian/spice: high 7.1

SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.

Action: Upgrade spice to 0.12.6-4.1 or later.

Affected

introducedfixedlast affected
00.12.6-4.1-

Fixed versions

0.12.6-4.1

Sources

published · modified · JSON