[ol7_u6_base] spice-server-0.14.0-6.el7.x86_64

The Simple Protocol for Independent Computing Environments (SPICE) is
a remote display system built for virtual environments which allows
you to view a computing 'desktop' environment not only on the machine
where it is running, but from anywhere on the Internet and from a wide
variety of machine architectures.

This package contains the run-time libraries for any application that wishes
to be a SPICE server.

Changelog (Show File list) (Show related packages)

• Thu Aug 09 2018 Frediano Ziglio <fziglio@redhat.com> - 0.14.0-6

  - Fix flexible array buffer overflow
    Resolves: rhbz#1596008

• Wed Jun 20 2018 Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-5

  - Don't mute Record channel on client reconnection
    Resolves: rhbz#1549132
  - Allow to configure TLS protocol versions and ciphers which SPICE will use for
    TLS communications
    Resolves: rhbz#1562213
  - Enable ECDH ciphers with OpenSSL 1.0
    Resolves: rhbz#1566597

• Fri Apr 27 2018 Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-4

  - Revert back to spice 0.12 behaviour where QXL guest resources for cursor
    commands are only released when the current cursor is replaced. This avoids
    a QEMU regression causing crashes during migration
    Resolves: rhbz#1567944

• Tue Apr 03 2018 Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-3

  - Disable TLSv1.0
    Resolves: rhbz#1521053

• Thu Oct 12 2017 Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-2

  - Add streaming patches for use with spice-streaming-agent
    Related: rhbz#1478356

• Wed Oct 11 2017 Christophe Fergeau <cfergeau@redhat.com> - 0.14.0-1

  - Rebase to 0.14.0 release
    Resolves: rhbz#1472948

• Fri Sep 22 2017 Christophe Fergeau <cfergeau@redhat.com> 0.13.90-2

  - Add lz4-devel BuildRequires
    Resolves: rhbz#1460191

• Wed Jul 26 2017 Christophe Fergeau <cfergeau@redhat.com> 0.13.90-1

  - Rebase to latest upstream release
    Resolves: rhbz#1472948

• Fri Jul 14 2017 Jonathon Jongsma <jjongsma@redhat.com> - 0.12.8-4

  - build with opus support
    Resolves: rhbz#1456832

• Fri Jun 30 2017 Christophe Fergeau <cfergeau@redhat.com> 0.12.8-3

  - Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
    sent from an authenticated client
    Resolves: CVE-2017-7506

• Tue Apr 25 2017 Christophe Fergeau <cfergeau@redhat.com> 0.12.8-2

  - Drop clients immediatly if the magic they send is wrong
    Resolves: rhbz#1416692

• Mon Jan 16 2017 Christophe Fergeau <cfergeau@redhat.com> 0.12.8-1

  - Rebase to spice-server 0.12.8
    Resolves: rhbz#1388947
    Resolves: rhbz#1377551
    Resolves: rhbz#1283202

• Fri Dec 09 2016 Frediano Ziglio <fziglio@redhat.com> - 0.12.4-20

  - Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large
    messages.
    Resolves: CVE-2016-9577
  - Fix remote DoS via crafted message.
    Resolves: CVE-2016-9578

• Fri Sep 09 2016 Christophe Fergeau <cfergeau@redhat.com> 0.12.4-19

  - Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it's needed.
    Resolves: rhbz#1352836

• Fri Jul 01 2016 Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-18

  - Fix crash when connecting to VM using smartcard passthrough
    Resolves: rhbz#1340899
  - Fix hang after unredirecting a USB device
    Resolves: rhbz#1338752
  - Backport spice_qxl_set_max_monitors()
    Resolves: rhbz#1283202

• Wed Apr 27 2016 Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-17

  - Fix crash when the client sends a wrong header (for example when using spice-html5)
    Resolves: rhbz#1281442
  - Fix crash when guest provides wrong address
    Resolves: rhbz#1264356
  - Fix thread-safety issue causing a crash when playing a Youtube video spanning
    multiple monitors
    Resolves: rhbz#1253375
  - Add patches reducing QEMU wake-ups
    Related: rhbz#912763, rhbz#1186146
  - Fix use-after-free after resetting a VM
    Resolves: rhbz#1281455
  - Send KeepAlive probes every 10 minutes
    Resolves: rhbz#1298590
  - Add client to guest volume synchronization
    Resolves: rhbz#1264107

• Mon Apr 25 2016 Christophe Fergeau <cfergeau@redhat.com> - 0.12.4-16

  - Use autosetup
    Related: CVE-2016-0749
  - Fix heap-based memory corruption within smartcard handling
    Resolves: CVE-2016-0749
  - Fix host memory access from guest with invalid primary surface parameters
    Resolves: CVE-2016-2150

• Wed Sep 23 2015 Frediano Ziglio <fziglio@redhat.com> 0.12.4-15

  - CVE-2015-5260 CVE-2015-5261 fixed various security flaws
    Resolves: rhbz#1267134

• Thu Sep 10 2015 Frediano Ziglio <fziglio@redhat.com> 0.12.4-14

  - Validate surface_id
    Resolves: rhbz#1260971

• Tue Jul 21 2015 Frediano Ziglio <fziglio@redhat.com> 0.12.4-13

  - Clean stale statistics file before creating a new one
    Resolves: rhbz#1177326

• Fri Jul 10 2015 Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-12

  - Fix a backport issue on Patch0040.
    Related: rhbz#1071176
    Resolves: rhbz#1241860

• Thu Jul 09 2015 Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-11

  - Don't assert on invalid client message
    Resolves: rhbz#1227410
  - Don't truncate large 'now' values in _spice_timer_set
    Resolves: rhbz#1227408
  - Avoid race conditions reading monitor configs from guest
    Resolves: rhbz#1239128
  - Lock the pixmap image cache for the entire fill_bits call
    Resolves: rhbz#1235443

• Wed Jul 08 2015 Fabiano Fidêncio <fidencio@redhat.com> 0.12.4-10

  - Fix qemu segmentation fault (core dumped) when boot KVM guest with
    spice in FIPS enabled mode.
    Resolves: rhbz#1071176

• Mon Jan 05 2015 Marc-Andre Lureau <marcandre.lureau@redhat.com> 0.12.4-9

  - Allow recent TLS/SSL methods, block SSLv2/SSLv3. Resolves: rhbz#1175540

• Tue Oct 21 2014 Christophe Fergeau <cfergeau@redhat.com> 0.12.4-8

  - Fix defects reported by Coverity
    Resolves: rhbz#885717
  - Validate surface bounding box sent from QXL driver
    Resolves: rhbz#1052856
  - Fix assertion sometimes happening during migration while a client is
    connected
    Resolves: rhbz#1035184
  - Fix crash when restarting VM with old client
    Resolves: rhbz#1145919

• Thu Sep 18 2014 Christophe Fergeau <cfergeau@redhat.com> 0.12.4-7

  - Fix assert in mjpeg_encoder_adjust_params_to_bit_rate()
    Resolves: rhbz#1086823
  - Fix "Spice-ERROR **: reds.c:1464:reds_send_link_ack: assertion
    `link->link_mess->channel_type == SPICE_CHANNEL_MAIN' failed" assertion
    Resolves: rhbz#1058625
  - Lower a monitor-config warning to debug level
    Resolves: rhbz#1119220
  - mjpeg: Don't warn on unsupported image formats
    Resolves: rhbz#1070028

• Thu Aug 07 2014 Marc-Andre Lureau <marcandre.lureau@redhat.com> 0.12.4-6

  - Fix invalid surface clearing
    Resolves: rhbz#1029646

• Wed Jan 29 2014 Christophe Fergeau <cfergeau@redhat.com> 0.12.4-5

  - Fix qemu crash during migration with reboot
    Resolves: rhbz#1016795
  - Monitor whether the client is alive
    Resolves: rhbz#1016790

• Tue Oct 15 2013 Christophe Fergeau <cfergeau@redhat.com> 0.12.4-3

  - Fix spice-server crash when client sends a password which is too long
    Resolves: CVE-2013-4282

• Fri Sep 13 2013 Christophe Fergeau <cfergeau@redhat.com> 0.12.4-2

  - Add upstream patch fixing rhbz#995041

• Fri Aug 02 2013 Hans de Goede <hdegoede@redhat.com> - 0.12.4-1

  - Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)
  - Add Obsoletes for dropped spice-client sub-package

• Mon Jul 22 2013 Yonit Halperin <yhalperi@redhat.com> 0.12.4-1

  - New upstream release 0.12.4
  - Require libjpeg-turbo-devel instead of libjpeg-devel
  - Remove "BuildRequires: spice-protocol" from spice-server
  - Add "Requires: spice-protocol" to spice-server-devel.

• Thu May 23 2013 Christophe Fergeau <cfergeau@redhat.com> 0.12.3-2

  - Stop building spicec, it's obsolete and superseded by remote-viewer
    (part of virt-viewer)

• Tue May 21 2013 Christophe Fergeau <cfergeau@redhat.com> 0.12.3-1

  - New upstream release 0.12.3
  - Drop all patches (they were all upstreamed)

• Mon Apr 15 2013 Hans de Goede <hdegoede@redhat.com> - 0.12.2-4

  - Add fix from upstream for a crash when the guest uses RGBA (rhbz#952242)

• Thu Mar 07 2013 Adam Jackson <ajax@redhat.com> 0.12.2-4

  - Rebuild for new libsasl2 soname in F19

• Mon Jan 21 2013 Hans de Goede <hdegoede@redhat.com> - 0.12.2-3

  - Add a number of misc. bug-fixes from upstream

• Fri Dec 21 2012 Adam Tkac <atkac redhat com> - 0.12.2-2

  - rebuild against new libjpeg

• Thu Dec 20 2012 Hans de Goede <hdegoede@redhat.com> - 0.12.2-1

  - New upstream release 0.12.2

• Fri Sep 28 2012 Hans de Goede <hdegoede@redhat.com> - 0.12.0-1

  - New upstream release 0.12.0
  - Some minor spec file cleanups
  - Enable building on arm

• Thu Sep 06 2012 Soren Sandmann <ssp@redhat.com> - 0.11.3-1

  - BuildRequire pyparsing

• Thu Sep 06 2012 Soren Sandmann <ssp@redhat.com> - 0.11.3-1

  - Add capability patches
  - Add capability patches to the included copy of spice-protocol
  
      Please see the comment above Patch6 and Patch7
      regarding this situation.

• Thu Sep 06 2012 Soren Sandmann <ssp@redhat.com> - 0.11.3-1

  - Update to 0.11.3 and drop upstreamed patches
  - BuildRequire spice-protocol 0.12.1

• Sat Jul 21 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.10.1-6

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

• Mon May 14 2012 Alon Levy <alevy@redhat.com>

  - Fix mjpeg memory leak and bad behavior.
  - Add usbredir to list of channels for security purposes. (#819484)

• Sun May 13 2012 Alon Levy <alevy@redhat.com>

  - Add double free fix. (#808936)

• Tue Apr 24 2012 Alon Levy <alevy@redhat.com>

  - Add 32 bit fixes from git master. (#815717)

• Tue Feb 28 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.10.1-2

  - Rebuilt for c++ ABI breakage

• Mon Jan 23 2012 Hans de Goede <hdegoede@redhat.com> - 0.10.1-1

  - New upstream release 0.10.1

• Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.10.0-2

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

• Thu Nov 10 2011 Alon Levy <alevy@redhat.com> - 0.10.0-1

  - New upstream release 0.10.0
  - support spice-server.i686

• Wed Sep 28 2011 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-2

  - Provides spice-xpi-client alternative in spice-client

• Thu Aug 25 2011 Hans de Goede <hdegoede@redhat.com> - 0.9.1-1

  - New upstream release 0.9.1

• Mon Jul 25 2011 Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1

  - New upstream release 0.9.0

• Wed Apr 20 2011 Hans de Goede <hdegoede@redhat.com> - 0.8.1-1

  - New upstream release 0.8.1

• Fri Mar 11 2011 Hans de Goede <hdegoede@redhat.com> - 0.8.0-2

  - Fix being unable to send ctrl+alt+key when release mouse is bound to
    ctrl+alt (which can happen when used from RHEV-M)

• Tue Mar 01 2011 Hans de Goede <hdegoede@redhat.com> - 0.8.0-1

  - New upstream release 0.8.0

• Fri Feb 11 2011 Hans de Goede <hdegoede@redhat.com> - 0.7.3-1

  - New upstream release 0.7.3

• Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.2-2

  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

• Wed Jan 19 2011 Hans de Goede <hdegoede@redhat.com> - 0.7.2-1

  - New upstream release 0.7.2

• Fri Dec 17 2010 Hans de Goede <hdegoede@redhat.com> - 0.7.1-1

  - New upstream release 0.7.1
  - Drop all patches (all upstreamed)
  - Enable smartcard (CAC) support

• Wed Nov 17 2010 Hans de Goede <hdegoede@redhat.com> - 0.6.3-4

  - Fix the info layer not showing when used through the XPI
  - Do not let the connection gui flash by when a hostname has been specified
    on the cmdline
  - Fix spice client locking up when dealing with XIM input (#654265)
  - Fix modifier keys getting stuck (#655048)
  - Fix spice client crashing when dealing with XIM ibus input (#655836)
  - Fix spice client only showing a white screen in full screen mode

• Sat Nov 06 2010 Hans de Goede <hdegoede@redhat.com> - 0.6.3-3

  - Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this
    fixes spicec from aborting when run in a non writable dir (#650253)

• Fri Nov 05 2010 Hans de Goede <hdegoede@redhat.com> - 0.6.3-2

  - Various bugfixes from upstream git:
    - Make spicec work together with the Firefox XPI for RHEV-M
    - Make sure the spicec window gets properly raised when first shown

• Mon Oct 18 2010 Hans de Goede <hdegoede@redhat.com> - 0.6.3-1

  - Update to 0.6.3
  - Enable GUI

• Thu Sep 30 2010 Gerd Hoffmann <kraxel@redhat.com> - 0.6.1-1

  - Update to 0.6.1.

• Tue Aug 31 2010 Alexander Larsson <alexl@redhat.com> - 0.6.0-1

  - Update to 0.6.0 (stable release)

• Tue Jul 20 2010 Alexander Larsson <alexl@redhat.com> - 0.5.3-1

  - Update to 0.5.3

• Tue Jul 13 2010 Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-4

  - Quote % in changelog to avoid macro expansion.

• Mon Jul 12 2010 Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-3

  - %configure handles CFLAGS automatically, no need to fiddle
    with %{optflags} manually.

• Mon Jul 12 2010 Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-2

  - Fix license: LGPL.
  - Cleanup specfile, drop bits not needed any more with
    recent rpm versions (F13+).
  - Use optflags as-is.
  -

• Fri Jul 09 2010 Gerd Hoffmann <kraxel@redhat.com> - 0.5.2-1

  - initial package.