Issued:
2020-02-11
Updated:
2020-02-11

RHSA-2020:0471 - Security Advisory

Synopsis

Moderate: spice-gtk security update

Type/Severity

Security Advisory: Moderate

Topic

An update for spice-gtk is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The spice-gtk packages provide a GIMP Toolkit (GTK+) widget for Simple Protocol for Independent Computing Environments (SPICE) clients. Both Virtual Machine Manager and Virtual Machine Viewer can make use of this widget to access virtual machines using the SPICE protocol.

Security Fix(es):

  • spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows (CVE-2018-10893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64

Fixes

  • BZ - 1598234 - CVE-2018-10893 spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows

CVEs

References

Red Hat Enterprise Linux Server 6

SRPM
spice-gtk-0.26-8.el6_10.2.src.rpm SHA-256: 15f432dbaa9843028407dd9107f7a86f7773a4065ed8535c3932d3a78526df15
x86_64
spice-glib-0.26-8.el6_10.2.i686.rpm SHA-256: c73e2202c7325c211a6f6a77f69a32b39d8fb6b205b2c582c238bd8221d754e4
spice-glib-0.26-8.el6_10.2.x86_64.rpm SHA-256: 41994a31aef7cd0c5b1fe7044daf5bb64e6ffc71bec4bbe2522e4cfd5b19b26e
spice-glib-devel-0.26-8.el6_10.2.i686.rpm SHA-256: 3aab5243041f06ffbeda595bded443708cf5f24085861d1c6ae924cbb83289d1
spice-glib-devel-0.26-8.el6_10.2.x86_64.rpm SHA-256: a510f4b71daf57812762519ca941ef95d50a29493e07cd8e87ec28b7d0950743
spice-gtk-0.26-8.el6_10.2.i686.rpm SHA-256: 9a459e31b15ee331fd16dac67a3581b4e91a45122e6ba793da2cacdec6a974bc
spice-gtk-0.26-8.el6_10.2.x86_64.rpm SHA-256: f943c9ee075a5d9d52f41f7834eae37d50f49b182de5a3a3220ff79399cc6fca
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm SHA-256: f657a071c52097c9706b3cb4a9b3ec1621da1d26152db4296db9e0409f25bfb4
spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm SHA-256: f657a071c52097c9706b3cb4a9b3ec1621da1d26152db4296db9e0409f25bfb4
spice-gtk-devel-0.26-8.el6_10.2.i686.rpm SHA-256: e596919d0f5bdcc40a5af065311aac39307f305f71405d6d780ec8bdee5e68a7
spice-gtk-devel-0.26-8.el6_10.2.x86_64.rpm SHA-256: b8058fb5c58c1ebfae526c4a0ac33f678c8d23c3c2ea86b7b4dcb082fad3fa85
spice-gtk-python-0.26-8.el6_10.2.x86_64.rpm SHA-256: d5db507738e6da9e45d09960d6b0562d3be21e496f21d9474829b40a61ac8ec6
spice-gtk-tools-0.26-8.el6_10.2.x86_64.rpm SHA-256: 8b39eeeb010344223fd7a9913316e0968742c5ebce47cbf1d4e66a4f291f839a
i386
spice-glib-0.26-8.el6_10.2.i686.rpm SHA-256: c73e2202c7325c211a6f6a77f69a32b39d8fb6b205b2c582c238bd8221d754e4
spice-glib-devel-0.26-8.el6_10.2.i686.rpm SHA-256: 3aab5243041f06ffbeda595bded443708cf5f24085861d1c6ae924cbb83289d1
spice-gtk-0.26-8.el6_10.2.i686.rpm SHA-256: 9a459e31b15ee331fd16dac67a3581b4e91a45122e6ba793da2cacdec6a974bc
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-devel-0.26-8.el6_10.2.i686.rpm SHA-256: e596919d0f5bdcc40a5af065311aac39307f305f71405d6d780ec8bdee5e68a7
spice-gtk-python-0.26-8.el6_10.2.i686.rpm SHA-256: d14e2f54fd6e0961aa9bb64bce3a79db844d3b7afb2e05caa93b7f29ba59090c
spice-gtk-tools-0.26-8.el6_10.2.i686.rpm SHA-256: cb35a1bd8429ad040bbd0415e9072c1ca36a18376e8337874518a079a21a32e5

Red Hat Enterprise Linux Workstation 6

SRPM
spice-gtk-0.26-8.el6_10.2.src.rpm SHA-256: 15f432dbaa9843028407dd9107f7a86f7773a4065ed8535c3932d3a78526df15
x86_64
spice-glib-0.26-8.el6_10.2.i686.rpm SHA-256: c73e2202c7325c211a6f6a77f69a32b39d8fb6b205b2c582c238bd8221d754e4
spice-glib-0.26-8.el6_10.2.x86_64.rpm SHA-256: 41994a31aef7cd0c5b1fe7044daf5bb64e6ffc71bec4bbe2522e4cfd5b19b26e
spice-glib-devel-0.26-8.el6_10.2.i686.rpm SHA-256: 3aab5243041f06ffbeda595bded443708cf5f24085861d1c6ae924cbb83289d1
spice-glib-devel-0.26-8.el6_10.2.x86_64.rpm SHA-256: a510f4b71daf57812762519ca941ef95d50a29493e07cd8e87ec28b7d0950743
spice-gtk-0.26-8.el6_10.2.i686.rpm SHA-256: 9a459e31b15ee331fd16dac67a3581b4e91a45122e6ba793da2cacdec6a974bc
spice-gtk-0.26-8.el6_10.2.x86_64.rpm SHA-256: f943c9ee075a5d9d52f41f7834eae37d50f49b182de5a3a3220ff79399cc6fca
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm SHA-256: f657a071c52097c9706b3cb4a9b3ec1621da1d26152db4296db9e0409f25bfb4
spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm SHA-256: f657a071c52097c9706b3cb4a9b3ec1621da1d26152db4296db9e0409f25bfb4
spice-gtk-devel-0.26-8.el6_10.2.i686.rpm SHA-256: e596919d0f5bdcc40a5af065311aac39307f305f71405d6d780ec8bdee5e68a7
spice-gtk-devel-0.26-8.el6_10.2.x86_64.rpm SHA-256: b8058fb5c58c1ebfae526c4a0ac33f678c8d23c3c2ea86b7b4dcb082fad3fa85
spice-gtk-python-0.26-8.el6_10.2.x86_64.rpm SHA-256: d5db507738e6da9e45d09960d6b0562d3be21e496f21d9474829b40a61ac8ec6
spice-gtk-tools-0.26-8.el6_10.2.x86_64.rpm SHA-256: 8b39eeeb010344223fd7a9913316e0968742c5ebce47cbf1d4e66a4f291f839a
i386
spice-glib-0.26-8.el6_10.2.i686.rpm SHA-256: c73e2202c7325c211a6f6a77f69a32b39d8fb6b205b2c582c238bd8221d754e4
spice-glib-devel-0.26-8.el6_10.2.i686.rpm SHA-256: 3aab5243041f06ffbeda595bded443708cf5f24085861d1c6ae924cbb83289d1
spice-gtk-0.26-8.el6_10.2.i686.rpm SHA-256: 9a459e31b15ee331fd16dac67a3581b4e91a45122e6ba793da2cacdec6a974bc
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-devel-0.26-8.el6_10.2.i686.rpm SHA-256: e596919d0f5bdcc40a5af065311aac39307f305f71405d6d780ec8bdee5e68a7
spice-gtk-python-0.26-8.el6_10.2.i686.rpm SHA-256: d14e2f54fd6e0961aa9bb64bce3a79db844d3b7afb2e05caa93b7f29ba59090c
spice-gtk-tools-0.26-8.el6_10.2.i686.rpm SHA-256: cb35a1bd8429ad040bbd0415e9072c1ca36a18376e8337874518a079a21a32e5

Red Hat Enterprise Linux Desktop 6

SRPM
spice-gtk-0.26-8.el6_10.2.src.rpm SHA-256: 15f432dbaa9843028407dd9107f7a86f7773a4065ed8535c3932d3a78526df15
x86_64
spice-glib-0.26-8.el6_10.2.i686.rpm SHA-256: c73e2202c7325c211a6f6a77f69a32b39d8fb6b205b2c582c238bd8221d754e4
spice-glib-0.26-8.el6_10.2.x86_64.rpm SHA-256: 41994a31aef7cd0c5b1fe7044daf5bb64e6ffc71bec4bbe2522e4cfd5b19b26e
spice-glib-devel-0.26-8.el6_10.2.i686.rpm SHA-256: 3aab5243041f06ffbeda595bded443708cf5f24085861d1c6ae924cbb83289d1
spice-glib-devel-0.26-8.el6_10.2.x86_64.rpm SHA-256: a510f4b71daf57812762519ca941ef95d50a29493e07cd8e87ec28b7d0950743
spice-gtk-0.26-8.el6_10.2.i686.rpm SHA-256: 9a459e31b15ee331fd16dac67a3581b4e91a45122e6ba793da2cacdec6a974bc
spice-gtk-0.26-8.el6_10.2.x86_64.rpm SHA-256: f943c9ee075a5d9d52f41f7834eae37d50f49b182de5a3a3220ff79399cc6fca
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm SHA-256: f657a071c52097c9706b3cb4a9b3ec1621da1d26152db4296db9e0409f25bfb4
spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm SHA-256: f657a071c52097c9706b3cb4a9b3ec1621da1d26152db4296db9e0409f25bfb4
spice-gtk-devel-0.26-8.el6_10.2.i686.rpm SHA-256: e596919d0f5bdcc40a5af065311aac39307f305f71405d6d780ec8bdee5e68a7
spice-gtk-devel-0.26-8.el6_10.2.x86_64.rpm SHA-256: b8058fb5c58c1ebfae526c4a0ac33f678c8d23c3c2ea86b7b4dcb082fad3fa85
spice-gtk-python-0.26-8.el6_10.2.x86_64.rpm SHA-256: d5db507738e6da9e45d09960d6b0562d3be21e496f21d9474829b40a61ac8ec6
spice-gtk-tools-0.26-8.el6_10.2.x86_64.rpm SHA-256: 8b39eeeb010344223fd7a9913316e0968742c5ebce47cbf1d4e66a4f291f839a
i386
spice-glib-0.26-8.el6_10.2.i686.rpm SHA-256: c73e2202c7325c211a6f6a77f69a32b39d8fb6b205b2c582c238bd8221d754e4
spice-glib-devel-0.26-8.el6_10.2.i686.rpm SHA-256: 3aab5243041f06ffbeda595bded443708cf5f24085861d1c6ae924cbb83289d1
spice-gtk-0.26-8.el6_10.2.i686.rpm SHA-256: 9a459e31b15ee331fd16dac67a3581b4e91a45122e6ba793da2cacdec6a974bc
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-devel-0.26-8.el6_10.2.i686.rpm SHA-256: e596919d0f5bdcc40a5af065311aac39307f305f71405d6d780ec8bdee5e68a7
spice-gtk-python-0.26-8.el6_10.2.i686.rpm SHA-256: d14e2f54fd6e0961aa9bb64bce3a79db844d3b7afb2e05caa93b7f29ba59090c
spice-gtk-tools-0.26-8.el6_10.2.i686.rpm SHA-256: cb35a1bd8429ad040bbd0415e9072c1ca36a18376e8337874518a079a21a32e5

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
spice-gtk-0.26-8.el6_10.2.src.rpm SHA-256: 15f432dbaa9843028407dd9107f7a86f7773a4065ed8535c3932d3a78526df15
x86_64
spice-glib-0.26-8.el6_10.2.i686.rpm SHA-256: c73e2202c7325c211a6f6a77f69a32b39d8fb6b205b2c582c238bd8221d754e4
spice-glib-0.26-8.el6_10.2.x86_64.rpm SHA-256: 41994a31aef7cd0c5b1fe7044daf5bb64e6ffc71bec4bbe2522e4cfd5b19b26e
spice-glib-devel-0.26-8.el6_10.2.i686.rpm SHA-256: 3aab5243041f06ffbeda595bded443708cf5f24085861d1c6ae924cbb83289d1
spice-glib-devel-0.26-8.el6_10.2.x86_64.rpm SHA-256: a510f4b71daf57812762519ca941ef95d50a29493e07cd8e87ec28b7d0950743
spice-gtk-0.26-8.el6_10.2.i686.rpm SHA-256: 9a459e31b15ee331fd16dac67a3581b4e91a45122e6ba793da2cacdec6a974bc
spice-gtk-0.26-8.el6_10.2.x86_64.rpm SHA-256: f943c9ee075a5d9d52f41f7834eae37d50f49b182de5a3a3220ff79399cc6fca
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.i686.rpm SHA-256: 04e73661143101e3ae39e1c8e0c1a82659db9cad3c4c8e626e07e934df0ad1f7
spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm SHA-256: f657a071c52097c9706b3cb4a9b3ec1621da1d26152db4296db9e0409f25bfb4
spice-gtk-debuginfo-0.26-8.el6_10.2.x86_64.rpm SHA-256: f657a071c52097c9706b3cb4a9b3ec1621da1d26152db4296db9e0409f25bfb4
spice-gtk-devel-0.26-8.el6_10.2.i686.rpm SHA-256: e596919d0f5bdcc40a5af065311aac39307f305f71405d6d780ec8bdee5e68a7
spice-gtk-devel-0.26-8.el6_10.2.x86_64.rpm SHA-256: b8058fb5c58c1ebfae526c4a0ac33f678c8d23c3c2ea86b7b4dcb082fad3fa85
spice-gtk-python-0.26-8.el6_10.2.x86_64.rpm SHA-256: d5db507738e6da9e45d09960d6b0562d3be21e496f21d9474829b40a61ac8ec6
spice-gtk-tools-0.26-8.el6_10.2.x86_64.rpm SHA-256: 8b39eeeb010344223fd7a9913316e0968742c5ebce47cbf1d4e66a4f291f839a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.