Уведомление безопасности openSUSE-SU-2018:2730-1

Высокая (6.5)

(AV:N/AC:L/Au:S/C:P/I:P/A:P)

SUSE

libspice-client-glib-2_0-8 (any) libspice-client-glib-2_0-8-debuginfo (any) libspice-client-glib-helper (any) libspice-client-glib-helper-debuginfo (any) libspice-client-gtk-3_0-5 (any) libspice-client-gtk-3_0-5-debuginfo (any) libspice-controller0 (any) libspice-controller0-debuginfo (any) spice-gtk (any) spice-gtk-debuginfo (any) spice-gtk-debugsource (any) spice-gtk-devel (any) spice-gtk-lang (any) typelib-1_0-SpiceClientGlib-2_0 (any) typelib-1_0-SpiceClientGtk-3_0 (any)

Уведомление безопасности об уязвимостях openSUSE Leap 15.0

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE Leap 15.0:
x86_64:
spice-gtk-devel - 0.34-lp150.2.3.1
libspice-client-gtk-3_0-5 - 0.34-lp150.2.3.1
spice-gtk-debugsource - 0.34-lp150.2.3.1
libspice-controller0-debuginfo - 0.34-lp150.2.3.1
typelib-1_0-SpiceClientGlib-2_0 - 0.34-lp150.2.3.1
libspice-client-glib-2_0-8 - 0.34-lp150.2.3.1
spice-gtk-debuginfo - 0.34-lp150.2.3.1
libspice-controller0 - 0.34-lp150.2.3.1
libspice-client-glib-helper - 0.34-lp150.2.3.1
spice-gtk - 0.34-lp150.2.3.1
libspice-client-gtk-3_0-5-debuginfo - 0.34-lp150.2.3.1
typelib-1_0-SpiceClientGtk-3_0 - 0.34-lp150.2.3.1
libspice-client-glib-helper-debuginfo - 0.34-lp150.2.3.1
libspice-client-glib-2_0-8-debuginfo - 0.34-lp150.2.3.1
openSUSE Leap 15.0:
noarch:
spice-gtk-lang - 0.34-lp150.2.3.1

http://lists.opensuse.org/opensuse-security-announce/2018-09/msg00029.html
https://bugzilla.suse.com/1101295
https://bugzilla.suse.com/1101420
https://bugzilla.suse.com/1104448

Источник: CVE
Наименование: CVE-2018-10893
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10893

Источник: CVE
Наименование: CVE-2018-10873
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10873