FEDORA-2021-09ce0cdfac — security update for spice-vdagent

stable

spice-vdagent-0.21.0-1.fc33

FEDORA-2021-09ce0cdfac created by victortoso 4 years ago for Fedora 33

Update to spice-vdagent 0.21.0: security fixes: CVE-2020-25650, CVE-2020-25651, CVE-2020-25652, CVE-2020-25653

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-09ce0cdfac

This update has been submitted for testing by victortoso.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

pwalter commented & provided feedback 4 years ago

karma

Works

filiperosset commented & provided feedback 4 years ago

karma

no regressions noted

This update can be pushed to stable now if the maintainer wishes

4 years ago

cserpentis commented & provided feedback 4 years ago

karma

works for me

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

Builds

spice-vdagent-0.21.0-1.fc33

BZ#1886345 CVE-2020-25650 spice-vdagent: memory DoS via arbitrary entries in active_xfers hash table

BZ#1886359 CVE-2020-25651 spice-vdagent: possible file transfer DoS and information leak via active_xfers hash map

BZ#1886366 CVE-2020-25652 spice-vdagent: possibility to exhaust file descriptors in vdagentd

BZ#1886372 CVE-2020-25653 spice-vdagent: UNIX domain socket peer PID retrieved via SO_PEERCRED is subject to race condition

BZ#1894433 CVE-2020-25650 spice-vdagent: memory DoS via arbitrary entries in `active_xfers` hash table [fedora-all]

BZ#1894434 CVE-2020-25651 spice-vdagent: possible file transfer DoS and information leak via `active_xfers` hash map [fedora-all]

BZ#1894435 CVE-2020-25652 spice-vdagent: possibility to exhaust file descriptors in `vdagentd` [fedora-all]

BZ#1894436 CVE-2020-25653 spice-vdagent: UNIX domain socket peer PID retrieved via `SO_PEERCRED` is subject to race condition [fedora-all]

spice-vdagent-0.21.0-1.fc33

Automated Test Results

ignored