SUSE-SU-2020:3268-1: important: Security update for spice-vdagent

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for spice-vdagent
______________________________________________________________________________

Announcement ID:    SUSE-SU-2020:3268-1
Rating:             important
References:         #1173749 #1177780 #1177781 #1177782 #1177783 
                    
Cross-References:   CVE-2020-25650 CVE-2020-25651 CVE-2020-25652
                    CVE-2020-25653
Affected Products:
                    SUSE Linux Enterprise Module for Desktop Applications 15-SP2
______________________________________________________________________________

   An update that solves four vulnerabilities and has one
   errata is now available.

Description:

   This update for spice-vdagent fixes the following issues:

   Security issues fixed:

   - CVE-2020-25650: Fixed a memory DoS via arbitrary entries in
     `active_xfers` hash table (bsc#1177780).
   - CVE-2020-25651: Fixed a possible file transfer DoS and information leak
     via `active_xfers` hash map (bsc#1177781).
   - CVE-2020-25652: Fixed a possibility to exhaust file descriptors in
     `vdagentd` (bsc#1177782).
   - CVE-2020-25653: Fixed a race condition when the UNIX domain socket peer
     PID retrieved via `SO_PEERCRED` (bsc#1177783).


Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-3268=1



Package List:

   - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (aarch64 ppc64le s390x x86_64):

      spice-vdagent-0.19.0-3.3.1
      spice-vdagent-debuginfo-0.19.0-3.3.1
      spice-vdagent-debugsource-0.19.0-3.3.1


References:

   https://www.suse.com/security/cve/CVE-2020-25650.html
   https://www.suse.com/security/cve/CVE-2020-25651.html
   https://www.suse.com/security/cve/CVE-2020-25652.html
   https://www.suse.com/security/cve/CVE-2020-25653.html
   https://bugzilla.suse.com/1173749
   https://bugzilla.suse.com/1177780
   https://bugzilla.suse.com/1177781
   https://bugzilla.suse.com/1177782
   https://bugzilla.suse.com/1177783