Synopsis:          Important: spice security update
Advisory ID:       SLSA-2017:2471-1
Issue Date:        2017-08-15
CVE Numbers:       CVE-2017-7506
--

Security Fix(es):

* A vulnerability was discovered in spice server's protocol handling. An
authenticated attacker could send specially crafted messages to the spice
server, causing out-of-bounds memory accesses, leading to parts of server
memory being leaked or a crash. (CVE-2017-7506)

This issue was discovered by Frediano Ziglio (Red Hat).
--

SL7
  x86_64
    spice-debuginfo-0.12.8-2.el7.1.x86_64.rpm
    spice-server-0.12.8-2.el7.1.x86_64.rpm
    spice-server-devel-0.12.8-2.el7.1.x86_64.rpm

- Scientific Linux Development Team