-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 May 2016 08:25:05 +0200 Source: spice Binary: spice-client libspice-server1 libspice-server1-dbg libspice-server-dev Architecture: i386 Version: 0.12.5-1+deb8u3 Distribution: jessie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Salvatore Bonaccorso Description: libspice-server-dev - Header files and development documentation for spice-server libspice-server1 - Implements the server side of the SPICE protocol libspice-server1-dbg - Debugging symbols for libspice-server1 spice-client - Implements the client side of the SPICE protocol Changes: spice (0.12.5-1+deb8u3) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * CVE-2016-0749: heap-based buffer overflow in smartcard interaction * CVE-2016-2150: host memory access from guest using crafted primary surface parameters Checksums-Sha1: cdaed2f0ce74a204f459ece3daa6d16ee6aac34a 500758 spice-client_0.12.5-1+deb8u3_i386.deb 6f6bd0df57755193680cd02a4e8aacbf321fd7e0 483852 libspice-server1_0.12.5-1+deb8u3_i386.deb 83a40b8d4e810548c35e7d8873ce5ddabaffbe8a 1028246 libspice-server1-dbg_0.12.5-1+deb8u3_i386.deb 8db537522e721ac8f6f8c7598b03be1f88cef941 512640 libspice-server-dev_0.12.5-1+deb8u3_i386.deb Checksums-Sha256: e2e89406ba944d32f420aaeab464581900e2e01a58a85d908702c4ffcbbe6770 500758 spice-client_0.12.5-1+deb8u3_i386.deb 5b8f289dd12f0f30db82fb1e4359ddbe105b04ca88e65b0c91a87ddb4a03e4bb 483852 libspice-server1_0.12.5-1+deb8u3_i386.deb bb95eb49154b9a33e82e697ff99c73dba9ca41eae5a243a9ee2b919d3c48bebd 1028246 libspice-server1-dbg_0.12.5-1+deb8u3_i386.deb a923fdfec55303706d775371e84642cc32889d624b8d8ed8359b8be93c6c6f62 512640 libspice-server-dev_0.12.5-1+deb8u3_i386.deb Files: bec77c1881a20ce6ee3d15509645b1af 500758 misc optional spice-client_0.12.5-1+deb8u3_i386.deb 61a7c99b00c7b89896e28f6e7ff9f8ce 483852 libs optional libspice-server1_0.12.5-1+deb8u3_i386.deb cda7f93295bf69c37554751486bf74fc 1028246 debug extra libspice-server1-dbg_0.12.5-1+deb8u3_i386.deb b0488fbd5c1c4d8f24b76ac8a5595a8f 512640 libdevel optional libspice-server-dev_0.12.5-1+deb8u3_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJXU8AzAAoJEIk4rQGIRk2LNqIP/2E6onJkeCWYDSmEG6BZZWhn 3il9ae20s2QMmeytO/4D53MlVxeQGRFsm7qJpt/DvuigApFZHQW4VhqRacLRU6G0 bd84F21c9PAB1/c/vMy29hb/IWYgzBnATx5gIF5+VfPRaB7JBZPK1dKilskJihNm 02vjKfjdpeU4d3vupUAE9pf8KEKZl2jMQ0WVtE7PaqkhVKNtl/QVFRPhkofx+A6P 8YK79/mPjKEONKdZCiXeq73Gu0K/9CUcaoDuIrRTeX/ZKa7nLI/0uITncnLe4fh5 WEVyKconvQ0Bk+DejW1Tdg29L/16PjhHGScm01ZbqmT0pC2PcJRtCNboqhRvkeSb d5bUXzvSVMI2Ohy7MiuEo0AKmkQv5tD0+FE9TLpToNvBRzv6HMI3EEn/t1ImYq0/ pJwEQ21NTYy3LDtJ2l2SBP+tDd+XEK7Ii47doDOujfIUNLaDp/t0PoQU1M/zYewn mw4uL8mESBtkXXHUg1jM8SUcwR2efqnwcr/loPuINh27nQqoE/IYC5ru630wLTNk Rf7aZmNjSnTyPJosWZPCa1KKip/vT3bMtb4rmz7gGcRyMDJpWXOoUBlqMNLBhYwt cgumr1pIPHGdl8iruLijdbEFxtWSq59cD4CxIoQgxPlojp9M6BNsgUThaVVy+O6M HmaW7OyLr9apGNW/UPBb =YaPz -----END PGP SIGNATURE-----