RHBA-2015:2429 - Bug Fix Advisory

Topic

Updated spice packages that fix several bugs are now available for Red Hat Enterprise Linux 7.

Description

The Simple Protocol for Independent Computing Environments (SPICE) is a remote display system built for virtual environments which allows the user to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures.

This update fixes the following bugs:

• Previously, an infinite loop in some cases triggered in the SPICE server on long-running virtual machines (VMs). As a consequence, SPICE sessions on the affected server became unresponsive. With this update, 64-bit timer values are now used for the appropriate SPICE sessions, and the described infinite loops no longer occur. (BZ#1227408)
• When encrypting the SPICE connection password while booting in FIPS mode, SPICE previously attempted to use a weak encryption method. Consequently, the encryption failed and QEMU terminated unexpectedly. This update adjusts SPICE to requires Simple Authentication and Security Layer (SASL) authentication when using FIPS, which prevents the described crash from occurring. (BZ#1071176)
• Prior to this update, Microsoft Windows guests with multi-monitor setup in some cases waited for an image that had already been deleted, which caused the client to become unresponsive. With this update, reference counting has been added to channel images in the client and thread safety has been improved for image caching in the server. As a result, Windows guests no longer hang due to the mentioned reasons. (BZ#1235443)

Users of spice are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1071176 - qemu segmentation fault (core dumped) when boot KVM guest with spice in FIPS enabled mode
• BZ - 1177326 - Failed to start domain due to "Spice-ERROR **: reds.c:3975:do_spice_init: statistics shm_open failed, Permission denied"
• BZ - 1227408 - _spice_timer_set truncates large "now" values
• BZ - 1227410 - vm down because of client reset. assert error
• BZ - 1235443 - High Resolution Multi-Monitor Windows Guest freeze
• BZ - 1241860 - Fail to launch spice guest console via virt-viewer or virt-manager

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal