Changelog for spice-server-0.14.0-9.el7.x86_64.rpm :

* Wed Dec 04 2019 Frediano Ziglio - 0.14.0-9- Always enable latency monitor to keep tcp connection alive Resolves: rhbz#1719736
* Thu Jun 20 2019 Frediano Ziglio - 0.14.0-8- Avoid potential crash from buggy guest driver Resolves: rhbz#1582137
* Tue Dec 18 2018 Christophe Fergeau - 0.14.0-7- Fix off-by-one error during guest-to-host memory address conversion Resolves: CVE-2019-3813- Add patch for upstream commit 48179332d9da0. This should help with corrupted spice-html5 displays Resolves: rhbz#1573739- Add missing minimum openssl version Requires for patch #24 Resolves: rhbz#1627693
* Thu Aug 09 2018 Frediano Ziglio - 0.14.0-6- Fix flexible array buffer overflow Resolves: rhbz#1596008
* Wed Jun 20 2018 Christophe Fergeau - 0.14.0-5- Don\'t mute Record channel on client reconnection Resolves: rhbz#1549132- Allow to configure TLS protocol versions and ciphers which SPICE will use for TLS communications Resolves: rhbz#1562213- Enable ECDH ciphers with OpenSSL 1.0 Resolves: rhbz#1566597
* Fri Apr 27 2018 Christophe Fergeau - 0.14.0-4- Revert back to spice 0.12 behaviour where QXL guest resources for cursor commands are only released when the current cursor is replaced. This avoids a QEMU regression causing crashes during migration Resolves: rhbz#1567944
* Tue Apr 03 2018 Christophe Fergeau - 0.14.0-3- Disable TLSv1.0 Resolves: rhbz#1521053
* Thu Oct 12 2017 Christophe Fergeau - 0.14.0-2- Add streaming patches for use with spice-streaming-agent Related: rhbz#1478356
* Wed Oct 11 2017 Christophe Fergeau - 0.14.0-1- Rebase to 0.14.0 release Resolves: rhbz#1472948
* Fri Sep 22 2017 Christophe Fergeau 0.13.90-2- Add lz4-devel BuildRequires Resolves: rhbz#1460191
* Wed Jul 26 2017 Christophe Fergeau 0.13.90-1- Rebase to latest upstream release Resolves: rhbz#1472948
* Fri Jul 14 2017 Jonathon Jongsma - 0.12.8-4- build with opus support Resolves: rhbz#1456832
* Fri Jun 30 2017 Christophe Fergeau 0.12.8-3- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages sent from an authenticated client Resolves: CVE-2017-7506
* Tue Apr 25 2017 Christophe Fergeau 0.12.8-2- Drop clients immediatly if the magic they send is wrong Resolves: rhbz#1416692
* Mon Jan 16 2017 Christophe Fergeau 0.12.8-1- Rebase to spice-server 0.12.8 Resolves: rhbz#1388947 Resolves: rhbz#1377551 Resolves: rhbz#1283202
* Fri Dec 09 2016 Frediano Ziglio - 0.12.4-20- Fix buffer overflow in main_channel_alloc_msg_rcv_buf when reading large messages. Resolves: CVE-2016-9577- Fix remote DoS via crafted message. Resolves: CVE-2016-9578
* Fri Sep 09 2016 Christophe Fergeau 0.12.4-19- Ensure SPICE_MIGRATE_COMPLETED is sent in all cases when it\'s needed. Resolves: rhbz#1352836
* Fri Jul 01 2016 Christophe Fergeau - 0.12.4-18- Fix crash when connecting to VM using smartcard passthrough Resolves: rhbz#1340899- Fix hang after unredirecting a USB device Resolves: rhbz#1338752- Backport spice_qxl_set_max_monitors() Resolves: rhbz#1283202
* Wed Apr 27 2016 Christophe Fergeau - 0.12.4-17- Fix crash when the client sends a wrong header (for example when using spice-html5) Resolves: rhbz#1281442- Fix crash when guest provides wrong address Resolves: rhbz#1264356- Fix thread-safety issue causing a crash when playing a Youtube video spanning multiple monitors Resolves: rhbz#1253375- Add patches reducing QEMU wake-ups Related: rhbz#912763, rhbz#1186146- Fix use-after-free after resetting a VM Resolves: rhbz#1281455- Send KeepAlive probes every 10 minutes Resolves: rhbz#1298590- Add client to guest volume synchronization Resolves: rhbz#1264107
* Mon Apr 25 2016 Christophe Fergeau - 0.12.4-16- Use autosetup Related: CVE-2016-0749- Fix heap-based memory corruption within smartcard handling Resolves: CVE-2016-0749- Fix host memory access from guest with invalid primary surface parameters Resolves: CVE-2016-2150
* Wed Sep 23 2015 Frediano Ziglio 0.12.4-15- CVE-2015-5260 CVE-2015-5261 fixed various security flaws Resolves: rhbz#1267134
* Thu Sep 10 2015 Frediano Ziglio 0.12.4-14- Validate surface_id Resolves: rhbz#1260971
* Tue Jul 21 2015 Frediano Ziglio 0.12.4-13- Clean stale statistics file before creating a new one Resolves: rhbz#1177326
* Fri Jul 10 2015 Fabiano Fidêncio 0.12.4-12- Fix a backport issue on Patch0040. Related: rhbz#1071176 Resolves: rhbz#1241860
* Thu Jul 09 2015 Fabiano Fidêncio 0.12.4-11- Don\'t assert on invalid client message Resolves: rhbz#1227410- Don\'t truncate large \'now\' values in _spice_timer_set Resolves: rhbz#1227408- Avoid race conditions reading monitor configs from guest Resolves: rhbz#1239128- Lock the pixmap image cache for the entire fill_bits call Resolves: rhbz#1235443
* Wed Jul 08 2015 Fabiano Fidêncio 0.12.4-10- Fix qemu segmentation fault (core dumped) when boot KVM guest with spice in FIPS enabled mode. Resolves: rhbz#1071176
* Mon Jan 05 2015 Marc-Andre Lureau 0.12.4-9- Allow recent TLS/SSL methods, block SSLv2/SSLv3. Resolves: rhbz#1175540
* Tue Oct 21 2014 Christophe Fergeau 0.12.4-8- Fix defects reported by Coverity Resolves: rhbz#885717- Validate surface bounding box sent from QXL driver Resolves: rhbz#1052856- Fix assertion sometimes happening during migration while a client is connected Resolves: rhbz#1035184- Fix crash when restarting VM with old client Resolves: rhbz#1145919
* Thu Sep 18 2014 Christophe Fergeau 0.12.4-7- Fix assert in mjpeg_encoder_adjust_params_to_bit_rate() Resolves: rhbz#1086823- Fix \"Spice-ERROR
*
*: reds.c:1464:reds_send_link_ack: assertion `link->link_mess->channel_type == SPICE_CHANNEL_MAIN\' failed\" assertion Resolves: rhbz#1058625- Lower a monitor-config warning to debug level Resolves: rhbz#1119220- mjpeg: Don\'t warn on unsupported image formats Resolves: rhbz#1070028
* Thu Aug 07 2014 Marc-Andre Lureau 0.12.4-6- Fix invalid surface clearing Resolves: rhbz#1029646
* Wed Jan 29 2014 Christophe Fergeau 0.12.4-5- Fix qemu crash during migration with reboot Resolves: rhbz#1016795- Monitor whether the client is alive Resolves: rhbz#1016790
* Tue Oct 15 2013 Christophe Fergeau 0.12.4-3- Fix spice-server crash when client sends a password which is too long Resolves: CVE-2013-4282
* Fri Sep 13 2013 Christophe Fergeau 0.12.4-2- Add upstream patch fixing rhbz#995041
* Fri Aug 02 2013 Hans de Goede - 0.12.4-1- Add patches from upstream git to fix sound-channel-free crash (rhbz#986407)- Add Obsoletes for dropped spice-client sub-package
* Mon Jul 22 2013 Yonit Halperin 0.12.4-1- New upstream release 0.12.4- Require libjpeg-turbo-devel instead of libjpeg-devel- Remove \"BuildRequires: spice-protocol\" from spice-server- Add \"Requires: spice-protocol\" to spice-server-devel.
* Thu May 23 2013 Christophe Fergeau 0.12.3-2- Stop building spicec, it\'s obsolete and superseded by remote-viewer (part of virt-viewer)
* Tue May 21 2013 Christophe Fergeau 0.12.3-1- New upstream release 0.12.3- Drop all patches (they were all upstreamed)
* Mon Apr 15 2013 Hans de Goede - 0.12.2-4- Add fix from upstream for a crash when the guest uses RGBA (rhbz#952242)
* Thu Mar 07 2013 Adam Jackson 0.12.2-4- Rebuild for new libsasl2 soname in F19
* Mon Jan 21 2013 Hans de Goede - 0.12.2-3- Add a number of misc. bug-fixes from upstream
* Fri Dec 21 2012 Adam Tkac - 0.12.2-2- rebuild against new libjpeg
* Thu Dec 20 2012 Hans de Goede - 0.12.2-1- New upstream release 0.12.2
* Fri Sep 28 2012 Hans de Goede - 0.12.0-1- New upstream release 0.12.0- Some minor spec file cleanups- Enable building on arm
* Thu Sep 06 2012 Soren Sandmann - 0.11.3-1- BuildRequire pyparsing
* Thu Sep 06 2012 Soren Sandmann - 0.11.3-1- Add capability patches- Add capability patches to the included copy of spice-protocol Please see the comment above Patch6 and Patch7 regarding this situation.
* Thu Sep 06 2012 Soren Sandmann - 0.11.3-1- Update to 0.11.3 and drop upstreamed patches- BuildRequire spice-protocol 0.12.1
* Sat Jul 21 2012 Fedora Release Engineering - 0.10.1-6- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Mon May 14 2012 Alon Levy - Fix mjpeg memory leak and bad behavior.- Add usbredir to list of channels for security purposes. (#819484)
* Sun May 13 2012 Alon Levy - Add double free fix. (#808936)
* Tue Apr 24 2012 Alon Levy - Add 32 bit fixes from git master. (#815717)
* Tue Feb 28 2012 Fedora Release Engineering - 0.10.1-2- Rebuilt for c++ ABI breakage
* Mon Jan 23 2012 Hans de Goede - 0.10.1-1- New upstream release 0.10.1
* Sat Jan 14 2012 Fedora Release Engineering - 0.10.0-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Thu Nov 10 2011 Alon Levy - 0.10.0-1- New upstream release 0.10.0- support spice-server.i686
* Wed Sep 28 2011 Marc-André Lureau - 0.9.1-2- Provides spice-xpi-client alternative in spice-client
* Thu Aug 25 2011 Hans de Goede - 0.9.1-1- New upstream release 0.9.1
* Mon Jul 25 2011 Marc-André Lureau - 0.9.0-1- New upstream release 0.9.0
* Wed Apr 20 2011 Hans de Goede - 0.8.1-1- New upstream release 0.8.1
* Fri Mar 11 2011 Hans de Goede - 0.8.0-2- Fix being unable to send ctrl+alt+key when release mouse is bound to ctrl+alt (which can happen when used from RHEV-M)
* Tue Mar 01 2011 Hans de Goede - 0.8.0-1- New upstream release 0.8.0
* Fri Feb 11 2011 Hans de Goede - 0.7.3-1- New upstream release 0.7.3
* Wed Feb 09 2011 Fedora Release Engineering - 0.7.2-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Wed Jan 19 2011 Hans de Goede - 0.7.2-1- New upstream release 0.7.2
* Fri Dec 17 2010 Hans de Goede - 0.7.1-1- New upstream release 0.7.1- Drop all patches (all upstreamed)- Enable smartcard (CAC) support
* Wed Nov 17 2010 Hans de Goede - 0.6.3-4- Fix the info layer not showing when used through the XPI- Do not let the connection gui flash by when a hostname has been specified on the cmdline- Fix spice client locking up when dealing with XIM input (#654265)- Fix modifier keys getting stuck (#655048)- Fix spice client crashing when dealing with XIM ibus input (#655836)- Fix spice client only showing a white screen in full screen mode
* Sat Nov 06 2010 Hans de Goede - 0.6.3-3- Log to ~/.spicec/cegui.log rather then to CEGUI.log in the cwd, this fixes spicec from aborting when run in a non writable dir (#650253)
* Fri Nov 05 2010 Hans de Goede - 0.6.3-2- Various bugfixes from upstream git: - Make spicec work together with the Firefox XPI for RHEV-M - Make sure the spicec window gets properly raised when first shown
* Mon Oct 18 2010 Hans de Goede - 0.6.3-1- Update to 0.6.3- Enable GUI
* Thu Sep 30 2010 Gerd Hoffmann - 0.6.1-1- Update to 0.6.1.
* Tue Aug 31 2010 Alexander Larsson - 0.6.0-1- Update to 0.6.0 (stable release)
* Tue Jul 20 2010 Alexander Larsson - 0.5.3-1- Update to 0.5.3
* Tue Jul 13 2010 Gerd Hoffmann - 0.5.2-4- Quote % in changelog to avoid macro expansion.
* Mon Jul 12 2010 Gerd Hoffmann - 0.5.2-3- %configure handles CFLAGS automatically, no need to fiddle with %{optflags} manually.
* Mon Jul 12 2010 Gerd Hoffmann - 0.5.2-2- Fix license: LGPL.- Cleanup specfile, drop bits not needed any more with recent rpm versions (F13+).- Use optflags as-is.-
* Fri Jul 09 2010 Gerd Hoffmann - 0.5.2-1- initial package.