RHBA-2014:1487 - Bug Fix Advisory

Topic

Updated spice-gtk packages that fix several bugs and add one enhancement are now
available for Red Hat Enterprise Linux 6.

Description

The spice-gtk packages provide a GIMP Toolkit (GTK+) widget for SPICE (Simple
Protocol for Independent Computing Environments) clients. Both Virtual Machine
Manager and Virtual Machine Viewer can make use of this widget to access virtual
machines using the SPICE protocol.

The spice-gtk packages have been upgraded to upstream version 0.22, which
provides a number of bug fixes over the previous version. (BZ#1097338)

This update also fixes the following bugs:

• Previously, for SSL connections, a connection was considered successful if the

certificate subject matched the host name even if a non-matching user-specified
host certificate subject was provided. Consequently, a remote-viewer client
could connect to the remote host even if the certificate subject did not match.
With this update, the certificate subject check has a priority over the host
name check, and connections now fail if user-specified certificate subject does
not match. (BZ#871034)

• Prior to this update, protocol version fallback was broken. As a consequence,

the user could not connect to spice guests on Red Hat Enterprise Linux 5
servers. The protocol fallback has been fixed, and the user is again able to
connect to spice guests on Red Hat Enterprise Linux 5 servers. (BZ#1017860)

• Previously, the virt-viewer utility was unable to handle large copy and paste

operations; if a very large amount of text was copied, the mingw-virt-viewer
utility displayed a failure to allocate memory for extensive data. This bug has
been fixed, and up to 100 MB of data can now be copied and pasted. (BZ#1019797)

• When migrating a VM with a client connected via mime connection file and

Secure Socket Layer (SSL), the migration fell back to a non-seamless operation,
because the Certification Authority (CA) was not correctly copied from memory.
With this update, the CA is now correctly copied on the destination session, and
the seamless migration can now be realized. (BZ#1022565)

• When migrating a guest repeatedly while connected to the guest with an i686

client, the client could terminate unexpectedly with a segmentation fault. The
underlying source code has been patched, and the client no longer crashes during
migration. (BZ#1028637)

• Previously, the virt-viewer utility was taking invalid screenshots on

secondary displays. The screenshot memory region for secondary displays has been
fixed, and virt-viewer now creates correct screenshots. (BZ#1029765)

• Virt-viewer and remote-viewer utilities always scaled displays, but also

allowed the user to disable display resizing, changing the resolution on the
guest to match the display window size. Consequently, users could become
confused as they expected different behavior. The ability for the user to
disable resizing thus has been removed. (BZ#1054757)

• Previously, various clipboard managers operating on the client or on the guest

occasionally lost synchronization, which resulted in clipboard data loss and the
SPICE console freezing. Now, the spice-gtk utility has been patched so that
clipboard synchronization no longer freezes the SPICE console. (BZ#1108642)

In addition, this update adds the following enhancement:

• The spice-gtk utility advertises TLS 1.0 as its maximum supported TLS version.

With this update, spice-gtk supports more recent TLS version provided by the
openssl utility. (BZ#1035728)

Users of spice-gtk are advised to upgrade to these updated packages, which fix
these bugs and add this enhancement.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386

Fixes

• BZ - 871034 - if CN matches hostname/IP but does not match explicitly set host subject, the connection should fail
• BZ - 1017860 - Cannot connect to VMs on RHEL5 host
• BZ - 1019797 - Remote-viewer received SIGABRT after several copy-paste of big amount of text
• BZ - 1022565 - client_migrate_info fails when r-v connects through vv file over SSL encryption
• BZ - 1024501 - TCP sockets used for initial connection stay in CLOSE_WAIT forever after migration(s)
• BZ - 1028637 - i686 client gets segfault at repeated migration
• BZ - 1029765 - virt-viewer can not get the perfect screenshot of the display without icons
• BZ - 1032785 - [abrt] virt-viewer-0.5.6-8.el6: pa_stream_is_corked: Process /usr/bin/remote-viewer was killed by signal 6 (SIGABRT)
• BZ - 1035728 - Use TLS version 1.0 or better
• BZ - 1054757 - SPICE console is always scaled in fullscreen mode even if "Automatically resize" is disabled.
• BZ - 1097338 - Rebase spice-gtk to 0.22
• BZ - 1108628 - Remove RHEL-only support for RHEVM 'Pass Ctrl+Alt+Delete to virtual machine'
• BZ - 1108642 - Spice session freezes randomly

CVEs

(none)

References

(none)