Oval Definition:oval:org.opensuse.security:def:69481
Revision Date:2021-06-08Version:1
Title:Security update for spice (Important)
Description:

This update for spice fixes the following issues:

- CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686) - CVE-2020-14355: Fixed multiple buffer overflow vulnerabilities in QUIC decoding code (bsc#1177158)
Family:unixClass:patch
Status:Reference(s):1055186
1065600
1065729
1094244
1112178
1113956
1154366
1167527
1168468
1169972
1171675
1171688
1171742
1173115
1173304
1174899
1175228
1175749
1175882
1176011
1176022
1176038
1176235
1176242
1176278
1176316
1176317
1176318
1176319
1176320
1176321
1176381
1176395
1176410
1176423
1176482
1176507
1176536
1176544
1176545
1176546
1176548
1176659
1176698
1176699
1176700
1176721
1176722
1176725
1176732
1176788
1176789
1176869
1176877
1176935
1176950
1176962
1176966
1176990
1177027
1177030
1177041
1177042
1177043
1177044
1177121
1177158
1177206
1177258
1177291
1177293
1177294
1177295
1177296
1181686
CVE-2020-0404
CVE-2020-0427
CVE-2020-0431
CVE-2020-0432
CVE-2020-14059
CVE-2020-14355
CVE-2020-14381
CVE-2020-14390
CVE-2020-25212
CVE-2020-25284
CVE-2020-25641
CVE-2020-25643
CVE-2020-26088
CVE-2021-20201
SUSE-SU-2020:1769-1
SUSE-SU-2020:2905-1
SUSE-SU-2021:1901-1
Platform(s):SUSE Linux Enterprise High Availability 15 SP1
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Server 15-LTSS
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 SP1 is installed
  • AND Package Information
  • cluster-md-kmp-default-4.12.14-197.61 is installed
  • OR dlm-kmp-default-4.12.14-197.61 is installed
  • OR gfs2-kmp-default-4.12.14-197.61 is installed
  • OR kernel-default-4.12.14-197.61 is installed
  • OR ocfs2-kmp-default-4.12.14-197.61 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND squid-4.12-5.20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • libspice-server-devel-0.14.0-4.9.1 is installed
  • OR libspice-server1-0.14.0-4.9.1 is installed
  • BACK