Описание
Security update for spice
This update for spice fixes the following issues:
- CVE-2021-20201: client initiated renegotiation causing denial of service (bsc#1181686)
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Список пакетов
openSUSE Leap 15.2
libspice-server-devel-0.14.2-lp152.2.6.1
libspice-server1-0.14.2-lp152.2.6.1
Ссылки
- E-Mail link for openSUSE-SU-2021:0874-1
- SUSE Security Ratings
- SUSE Bug 1181686
- SUSE CVE CVE-2021-20201 page
Описание
A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service (CPU consumption) by performing many renegotiations within a single connection.
Затронутые продукты
openSUSE Leap 15.2:libspice-server-devel-0.14.2-lp152.2.6.1
openSUSE Leap 15.2:libspice-server1-0.14.2-lp152.2.6.1
Ссылки
- CVE-2021-20201
- SUSE Bug 1181686