File spice-vdagent.changes of Package spice-vdagent

Overview Repositories Revisions Requests Users Attributes Meta

File spice-vdagent.changes of Package spice-vdagent

-------------------------------------------------------------------
Mon Jul 12 14:14:39 MDT 2021 - carnold@suse.com

- bsc#1177780 - VUL-0: CVE-2020-25650: spice-vdagent: memory DoS
  via arbitrary entries in `active_xfers` hash table
  0001-CVE-2020-25650-Avoids-unchecked-file-transfer-IDs-allocation-and-usage.patch
  0002-CVE-2020-25650-Avoids-uncontrolled-active_xfers-allocations.patch
- bsc#1177781 - VUL-0: CVE-2020-25651: spice-vdagent: possible file
  transfer DoS and information leak via `active_xfers` hash map
  0001-CVE-2020-25651-cleanup-active_xfers-when-the-client-disconnects.patch
  0002-CVE-2020-25651-vdagentd-do-not-allow-to-use-an-already-used-file-xfer-id.patch
- bsc#1177782 - VUL-0: CVE-2020-25652: spice-vdagent: possibility
  to exhaust file descriptors in `vdagentd` 
  0001-CVE-2020-25652-Avoids-unlimited-agent-connections.patch
  0002-CVE-2020-25652-vdagentd-Limit-number-of-agents-per-session-to-1.patch
- bsc#1177783 - VUL-0: CVE-2020-25653: spice-vdagent: UNIX domain
  socket peer PID retrieved via `SO_PEERCRED` is subject to race
  condition 
  0001-CVE-2020-25653-Avoids-user-session-hijacking.patch
  0002-CVE-2020-25653-Better-check-for-sessions.patch

-------------------------------------------------------------------
Tue Dec  5 16:12:24 UTC 2017 - cbosdonnat@suse.com

- Fix potential shell command injection.
  8ba17481-quote-save-dir-before-passing-to-shell.patch
  CVE-2017-15108 (bsc#1070724)

-------------------------------------------------------------------
Thu Jul 27 12:20:36 UTC 2017 - msuchanek@suse.com

- Fix warning in vdagentd-do-endian-swapping.patch

-------------------------------------------------------------------
Mon Feb 20 13:56:35 UTC 2017 - msuchanek@suse.com

- Add endian swapping to run on BE guests (boo#1012215).
  vdagentd-do-endian-swapping.patch

-------------------------------------------------------------------
Fri Nov 25 18:53:15 UTC 2016 - zaitor@opensuse.org

- Add pkgconfig(glib-2.0) BuildRequires: Explicit dependency.
- Handle spice-vdagentd.target in pre/post/preun/postun.
- Handle spice-vdagentd.conf in post via tmpfiles_create macro.

-------------------------------------------------------------------
Fri Nov 25 18:53:14 UTC 2016 - seife+obs@b1-systems.com

- Update to 0.17.0
  * Denies file-transfer in locked sessions
  * Denies file-transfer in login screen
  * Bump glib version to 2.28
  * Set exit code to 1 instead of 0 when virtio device cannot be
    opened
  * Fix double-free on uinput->screen_info (rhbz#1262635)
  * Code improvement over unix domain client server support (udcs)
  * Fix build compatiblity with different libsystemd versions
    (fdo#94209)
- obsoleted patches removed:
  8c465007-vdagentd-fixes-small-leak.patch
  f97751fa-revert-uinput-fix-small-leak-of-screen_info.patch
- package: add explicit buildrequires for pkgconfig(dbus-1)

-------------------------------------------------------------------
Tue Sep  6 12:56:15 UTC 2016 - cbosdonnat@suse.com

- Fix crash when changing guest display's resolution (bsc#997236)
  8c465007-vdagentd-fixes-small-leak.patch
  f97751fa-revert-uinput-fix-small-leak-of-screen_info.patch

-------------------------------------------------------------------
Thu Jun  2 11:36:40 UTC 2016 - cbosdonnat@suse.com

- fate#320079

-------------------------------------------------------------------
Tue Jul 21 18:52:21 UTC 2015 - mpluskal@suse.com

- Update tp 0.16.0
  * Xspice support
  * Release clipboard on client disconnect if owned by client 
    (rhbz#1003977)
  * Turn some error messages into debugging messages (rhbz#918310)
  * Not having the virtio channel is not an error; instead silently 
    do nothing
- Cleanup spec file with spec-cleaner
- Actually apply spice-vdagent-var_run.patch

-------------------------------------------------------------------
Wed Jul  9 16:21:19 UTC 2014 - fcrozat@suse.com

- Add supplements on virtio_console to automatically install
  spice-vdagent when X11 server is installed on KVM with Spice
  enabled.

-------------------------------------------------------------------
Tue Jul  1 14:10:31 UTC 2014 - fcrozat@suse.com

- Enable systemd service at initial install, it is needed for
  udev rules to properly start the agent.

-------------------------------------------------------------------
Tue May 27 08:45:45 CEST 2014 - ohering@suse.de

- fix /var/run handling
  spice-vdagent-var_run.patch

-------------------------------------------------------------------
Mon Feb  3 08:39:02 UTC 2014 - seife+obs@b1-systems.com

- run spec-cleaner
- remove autoreconf call

-------------------------------------------------------------------
Sun Feb  2 14:15:26 UTC 2014 - seife+obs@b1-systems.com

- import the spec file from fedora core 21, adapt for openSUSE
- version 0.15.0

Places

File spice-vdagent.changes of Package spice-vdagent

Places