Уведомление безопасности SUSE-SU-2019:0241-1

Высокая (5.4)

(AV:A/AC:M/Au:N/C:P/I:P/A:P)

SUSE

libspice-server1 (any) libspice-server1-debuginfo (any) spice-debugsource (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Software Development Kit 12-SP3, SUSE Linux Enterprise Desktop 12-SP4, SUSE Linux Enterprise Desktop 12-SP3, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server 12-SP4

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Software Development Kit 12-SP3:
aarch64, ppc64le, s390x, x86_64:
libspice-server-devel - 0.12.8-12.1
spice-debugsource - 0.12.8-12.1
SUSE Linux Enterprise Desktop 12-SP4:
x86_64:
libspice-server1-debuginfo - 0.12.8-12.1
libspice-server1 - 0.12.8-12.1
spice-debugsource - 0.12.8-12.1
SUSE Linux Enterprise Software Development Kit 12-SP4:
aarch64, ppc64le, s390x, x86_64:
libspice-server-devel - 0.12.8-12.1
spice-debugsource - 0.12.8-12.1
SUSE Linux Enterprise Desktop 12-SP3:
x86_64:
libspice-server1-debuginfo - 0.12.8-12.1
libspice-server1 - 0.12.8-12.1
spice-debugsource - 0.12.8-12.1
SUSE Linux Enterprise Server 12-SP3:
aarch64, ppc64le, s390x, x86_64:
libspice-server1-debuginfo - 0.12.8-12.1
libspice-server1 - 0.12.8-12.1
spice-debugsource - 0.12.8-12.1
SUSE Linux Enterprise Server 12-SP4:
aarch64, ppc64le, s390x, x86_64:
libspice-server1-debuginfo - 0.12.8-12.1
libspice-server1 - 0.12.8-12.1
spice-debugsource - 0.12.8-12.1

http://lists.suse.com/pipermail/sle-security-updates/2019-February/005084.html
https://bugzilla.suse.com/1122706

Источник: CVE
Наименование: CVE-2019-3813
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3813