RHBA-2011:0705 - Bug Fix Advisory

Topic

An updated spice-server package that fixes several bugs and adds a number of
enhancements is now available.

Description

The Simple Protocol for Independent Computing Environments (SPICE)
is a remote display protocol designed for virtual environments.
SPICE users can access a virtualized desktop or server from the local
system or any system with network access to the server. SPICE is used
in Red Hat Enterprise Linux for viewing virtualized guests running on
the KVM hypervisor or on Red Hat Enterprise Virtualization Hypervisors.

The spice-server package has been rebased to upstream version 0.8,
which fixes the following bugs and adds the following enhancements
(BZ#672035, BZ#645096):

• spice-server tried to use migration information even when it was not

provided or required. This resulted in a segmentation fault in the client
machine (the source of the migration operation). A check now determines
whether the client has provided or is required to provide migration
information. (BZ#674451)

• JPEG message encoding was handled differently between client and

server, such that the server passed the client a value to determine an
image's orientation, which the server interpreted as being invalid. This
resulted in the client aborting. The value passed from the server is now
the one the client expects, so the client no longer aborts. (BZ#670239)

• The palette cache was not always synchronized between client and

server following live migration of a virtual machine with multiple
monitors. The client side palette cache was not cleaned after
migration, which caused the client to terminate unexpectedly. The
target server now sends the "RESET" instruction to the client for
all monitors, so this crash no longer occurs. (BZ#622278)

• A typographical error in qemu-kvm output has been corrected.

(BZ#646483)

• Several superfluous dependencies were removed, including unnecessary

dependencies on libcacard, CEGUI, X-libs and alsa packages. (BZ#670245)

• The spice-server and spice-client packages use common libraries in

Red Hat Enterprise Linux 6.1. This renders the following packages obsolete:
cairo-spice 1.8.7.2 and earlier, ffmpeg-spice 0.4.9-1 and earlier,
pixman-spice 0.13.3-6 and earlier, and spice-common 0.4.2-8 and earlier.
These removed and obsoleted packages are now recorded in the
spice-server.spec file.

Note that if both spice-client and spice-server are installed on a
system, upgrading one of them will also cause the other to be upgraded.
(BZ#674171)

• Smart card (Common Access Card) support has been added to spice-server,

allowing single sign-on and other card services such as signing and
encryption. (BZ#674937)

All users requiring spice-server are advised to upgrade to this updated
package, which adds these enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64

Fixes

• BZ - 622278 - SPICE: Client connected to win7-X64 Guest crashed on migration.
• BZ - 645096 - Backport vdagent channel fixes from master
• BZ - 646483 - TYPO in qemu-kvm output
• BZ - 670239 - jpeg messages encoding is transfered as 4 and not 1, breaking client
• BZ - 670245 - spice-server.pc: do not list the following packages as requirements: libcacard, CEGUI, X-libs, alsa
• BZ - 672035 - spice-server: rebase to upstream 0.8 for RHEL-6.1
• BZ - 674171 - need an Obsoletes: tag for spice-common and spice-ffmpeg
• BZ - 674451 - spice segfault on migration

CVEs

(none)

References

(none)